Draper, Utah-based Senforce Technologies is breaking out the connectivity controls of its Endpoint Security Suite 3.0 (ESS) software to secure client systems specifically connecting via Wi-Fi.
The new Senforce Wi-Fi Security (SWIS) handles what Kip Meacham, the company’s Director of Product Management, calls the three major threats: what you connect to, what you send, and how it is managed: “Rather than deploy proprietary gateways or a sensor network, the more practical approach is to govern the connectivity at the endpoint,” Meacham says.
The software provides centralized reporting and administration of all clients trying to connect to the network, going as far as putting a “blinder” on an end user system to control what network resources can and can’t be used through a technology Senforce calls LockOn.
SWIS will handle the standard security issues in WLANs today, such as man-in-the-middle or evil twin attacks and rogue access points, and will automate enforcement of security policies on client systems.
If a client is also wired—connected via Ethernet—SWIS will shut down that hardware’s Wi-Fi signal. Senforce says this is a requirement of government branches like the Department of Defense. Senforce signed a contract to service the Department of Justice and the U.S. Attorney’s office late last year.
The company says its products comply with the FIPS 140-2 standard, and let the DOJ comply with the Federal Information Security Management Act. (Senforce, however, says that nine of the 24 major US government agencies have yet to even issue a wireless security plan to the Government Accountability office.)
SWIS will work on any type of 802.11 network, even the future 802.11n standard, according to the company. It also builds in location awareness to help pinpoint problems on the network.
“Rather than use triangulation techniques, the endpoints become like an ant colony looking for stuff,” says Meacham.
SWIS will also control the existence of any ad-hoc networks, manage encryption keys, and even completely suppress Wi-Fi in areas where that is desired. The software will also manage Personal Area Network connections using Bluetooth or Infrared (IrDA).
SWIS sells for $45 per user, with discounts available for large quantities.
