| Browser Control |
| Mitigate security risks caused by unsafe browsers |
| Web browsers have become a virtual Internet Swiss Army knife, offering functionality that goes well beyond web pages. They can digest news feeds, call other applications, handle proprietary technologies and with third party plug-ins, browser capabilities are effectively limitless. As browser functionality has expanded, the underlying complexity of the applications has expanded and a flood of vulnerabilities have emerged, many of which are critical in nature and can lead to a full compromise of the host machine. Even vulnerabilities that don’t result in remote code execution can have serious implications. |
| |
| |
| There are more browser capabilities to be
exploited, more potential for vulnerabilities. |
| – Gartner |
|
| |
Click to Enlarge  |
 |
Zscaler’s browser control enables policy enforcement by browser version,
patch level, allowed plug-ins and applications. |
|
| To secure browsers, Zscaler enforces policy in four areas: |
- Browser Versions – Older browsers are significantly more vulnerable to newer threats. Companies can enforce policy based on what browsers and what versions of that browser are permissible e.g., Enforce that all employees have either IE 8.0+ or Firefox 3.5+
- Browser Patches – For smaller security updates, browsers offer patches. Companies can enforce that all employees install these patches.
- Plug-in/Extensions – Because plug-ins and extensions are often third-party applications, they can have their own vulnerabilities, regardless of browser version. Companies can determine which plug-ins are allowed to be installed.
- Applications – As the browser is becoming a platform for Web-based applications, it also becomes vulnerable to the threats they can hide. Companies can enforce which applications can run in the browser.
|
| Finally, companies can configure regular scans (e.g. daily, weekly, or monthly) and set up alerts to warn if the user’s browser is vulnerable—without downloading any client-side software. |
| To learn more about Comprehensive Security, also read: Anti-Virus & Anti-Spyware and Advanced Threats |
| To request more information, please click here. |
| |
|
|
|
- Contact Sales
-
- Resources
-
More
|
|
|
|
The Cloud Security Company™
