Allot Secure Service Gateway

Full Traffic Visibility

Efficient and high performing networks begin with your ability to obtain a 360° view of network traffic and the QoE that your employees, customers, and branches are getting from datacenter and cloud applications. It also sheds light on shadow IT, BYOD, and mobile app usage that might otherwise go unnoticed.

Allot Secure Service Gateway monitors network traffic in real time and delivers full Layer 7+ visibility of application performance, capacity utilization and network health. Integration with Microsoft Active Directory provides traffic intelligence per user and per group, so you can understand how employees consume business applications and network resources. The granular traffic intelligence you get with Allot accelerates root cause analysis so you can pinpoint the cause of service degradation and quickly resolve the problem at its source.

Allot Secure Service Gateway also integrates comprehensive web threat visibility, enabling you to neutralize the impact of malware, phishing, and other web threats as well as inappropriate content that often accompanies recreational web usage and may cause legal or compliance concerns for your business. Key visibility features include:

• Layer 7 application visibility
• SSL encrypted traffic visibility
• Web content and web threat visibility
• User and endpoint visibility with L4-L7 QoE KPIs
• Dashboard monitoring and analytics
• Live, self-refreshing performance metrics reporting in a granularity of seconds

Granular Traffic Control

Allot Secure Service Gateway allows you to virtually partition LAN, WAN and Internet resources so that users and applications no longer compete with one another for bandwidth and Quality of Service (QoS). The highly granular visibility provided by Allot allows you to act with the same level of granularity to maintain optimal network efficiency and high application performance. Powerful policy tools help you define and enforce Acceptable Use Policy and prioritize applications that are critical to your business. For example, to improve user experience, you can dedicate minimum bandwidth to collaboration applications or prioritize real-time point-of-sale and inventory transactions over nonessential traffic. Likewise, you can block access to shadow IT or limit the use of recreational apps that could impact networkand data security. Key control capabilities include:

• Central and simple QoS policy management
• Supporting hundreds of thousands of dynamic traffic policies
• Automated QoS policy propagation to all deployed appliances
• Asymmetric QoS policy synchronized in real time across multiple datacenters
• Threshold-based enforcement (e.g., CER, live connections)
• Actionable alarms

Dynamic Actionable Recognition Technology (DART)

Allot’s DART engine, embedded in the platform inspects every single packet and classifies traffic per application, user, IP address, location, and by any static or dynamic policy element you define. Allot’s extensive signature library identifies thousands of web applications and protocols and also supports user-defined signatures. Automated DART protocol pack updates from the Allot cloud keep your deployment up to date with the latest application and web developments to ensure accurate traffic classification.

Web Security

Left unprotected, your business can easily fall victim to malware, ransomware and other web threats. Allot Secure Service Gateway combines superior application visibility and control with SSL inspection and web security powered by Kaspersky Lab, BitDefender and Sophos technologies, so you can prevent malicious attacks from threatening your optimized network while enabling employees and customers to use the Internet and cloud applications safely and productively. Key web security capabilities include:

• Internet Threat Visibility: Get a clear picture of online usage and understand how web security threats are impacting business productivity and viability.
• Web Filtering: Assure safe Internet use and prevent employee exposure to illegal or inappropriate web content in the workplace. Set the URLs and content categories you want to filter; limit access to certain times of the day; enable unblock requests; and receive admin alerts on filtering events.
• Anti-Malware: Prevent viruses, worms, Trojans, spyware, adware, phishing, and other malware from damaging mobile devices, infiltrating your network and causing loss of business data. Requires no action from users and no resources from their devices.
• Risky Apps Control: Block or limit use of risky applications that are often a conduit for malware insertion, data leakage and circumvention of your security measures.

DDoS and Bot Protection

Allot Secure Service Gateway employs carrier-proven anomaly detection technologies to protect your network and data center resources against DDoS and bot attacks that are designed to flood your network and disrupt service availability. Every inbound and outbound packet is inspected to ensure no threat goes undetected. Dynamic creation of filtering rules and surgical filtering of DDoS attack packets avoids over-blocking and allows legitimate traffic to flow unimpeded, keeping your business online and protected at all times. Allot also help you pinpoint host infection and abusive behavior according to abnormal outbound connection activity and malicious connection patterns, so you can treat the root cause of outbound spam, worm propagation and port scanning, and eliminate the additional load it puts on your network.

Scalability and Lower TCO

Modular licensing of capacity and functionality gives you the ability to tailor the security and performance levels of Allot Secure Service Gateway to the evolving needs of your organization. Allot maximizes your investment and dramatically lowers TCO by integrating visibility, security and control in a single appliance, and providing out-of-the-box support for more static and dynamic QoS policies than any comparable solution in the market.

The necessity for your employees and customers to connect and work productively with mission-critical applications, from any location and at any time, significantly increases your need for full network visibility, security and control.

The performance and efficiency of your network can be easily compromised by the ever-increasing demand for LAN, WAN and Internet bandwidth driven by cloud, mobile and video applications. Moreover, the growing use of BYOD and shadow IT have opened complex attack vectors for web threats to infect user devices, get into your network, and harm business productivity and viability.

Allot Secure Service Gateway (SSG) supports your demands with a single, scalable solution for your evolving requirements for application and user visibility, performance, and security.

Benefits

• Complete Visibility and Control Allot provides live traffic monitoring and usage reporting according to traffic policies that are mapped to your complex datacenter and cloud applications, giving you full visibility and control of application performance, web access, user quality of experience, shadow IT and web threats.
• Powerful Web Security and DDoS Protection Allot helps you embrace and maximize the business value of cloud (web) applications by detecting and blocking malware, phishing and other web threats before they harm application performance and user productivity. Allot also detects and surgically filters DDoS and bot traffic before it affects your network.
• High Performance and Reliability Allot Secure Service Gateway is built on the same carrier-class performance and reliability that Allot brings to many of the world’s largest network operators. Flexible redundancy configurations plus passive bypass with automatic port failover maximize uptime and availability.
• Scalability and Lower TCO Allot Secure Service Gateway integrates multiple functions in an Intel-based platform that protects your investment and lets you scale from 2 to 20 ports of 1GE/10GE network connectivity in a single appliance.