Cyan Networks Features
Secure List

Secure List is a database organized into categories of similarly-themed websites. You can activate one or more categories according to your needs: for a specific user, defined user groups or individual IP addresses. When you do, those users can no longer access the websites, which are not relevant to your business. Which helps keep your company productive.
We update Secure List daily, then download it automatically to your installation. So, your system is always up-to-date.
The following list shows the categories supported:
| Ads | Alcohol & Tobacco | Communities |
| Dating | Downloads | Drugs |
| Education | Finance | Gambling |
| Games | Government | Health care |
| Hosting | Jobs | Military & Weapons |
| Mobile phones | News | Phishing / Spyware / Virus / Proxies |
| Pornography | Real estate | Religion |
| Search engines / Directories | Shopping | Sport |
| Streaming media | Travel | Vehicles |
| Violence | Webmail |
.
Application Blocking

Nearly every modern application incorporates Web technologies to "talk" to the Internet. But most firewalls allow access only from HTTP and HTTPS files. So, applications "wrap" themselves in HTTP to be accepted by your firewall. There's only one problem: firewalls and standard proxy servers don't know what's actually being transferred inside the HTTP "wrapper."
Application Blocking helps you uncover the real data, and the danger that can come with it. It analyses Internet requests in various ways to detect embedded protocols, types of data transported and other typical traffic characteristics. Then, it builds a profile of the application and its purpose. So that you can "see" what is really inside an application.
Just like with Secure List, you can permit or refuse an application as you like: for a specific user, defined user groups or individual IP addresses.
| Audio/video | |
| Messenger | |
| Office documents | |
| Executables | |
| Active content |
|
Anti Virus Add-On CYAN Secure Web gives you in-depth coverage, complementing your client anti-virus software. Our protection starts at the gateway, where we scan incoming data to prevent infected files from entering your network domain. We integrated anti-virus scanners into CYAN Secure Web, so your administrative tasks are minimal. All you have to do is decide which scan engine to use. And, to block viruses, Trojan horses, worms and other malicious code hidden in encrypted data, CYAN Secure Web first breaks up the data, then applies its filters to the clear text stream. Of course, we make the clear text available only in your proxy server memory. That means that the data is still encrypted when transferred to your network. Together these features give you better system performance and stability. And peace of mind. |
SSL is a good thing
It ensures that your communication channel is secure when you transfer data. But, your system may not be safe, because a classic firewall is "blind" to content in encrypted connections.
Even when the system displays user warnings about invalid security certificates, most people simply click "Continue" when they see these browser popups. Something we call "click-thru syndrome." Which means that undesirable data can be entering your network.
CYAN Secure Web helps remove the danger caused by "click-thru syndrome." It gives you the power to control the policy and access in handling certificate validation failure. It intercepts encrypted connections to reveal the traffic inside the proxy in clear text. Then, it applies all filters, including anti virus scanning, without losing the security of transport link encryption.
When you activate CYAN Secure Web SSL interception, your security solution can "see" clearly.
Reporting
Reporting System is our database analysis tool that lets you know what‘s going on in your system. You can direct the Internet traffic logs of all your CYAN Secure Web installations into one central database, then use Reporting System to compile quick, comparison and summary reports.
And, knowledge is power. Reports show you the results of your efforts and of your investment in CYAN Secure Web. Reports give you a comprehensive insight into your system. Reports help you evaluate the effectiveness of your security solution, so you can make adjustments, as necessary, to keep your network safe.
Administration
The administration of Secure Web is done using your favorite web browser.
See some screenshots of the administration interface:
Central Management
For the topic of central management we have identified three scenarios that best meet the major requirements of our customers.
Central management of multiple proxy servers in a cluster system
Our appliance solutions support the operation in a cluster mode out of the box. Two or more machines are interconnected while using an easy management interface. All interconnected machines are accessible via one single IP address (service IP), and all machines in a cluster are active/active, so there is no need for an additional load balancer. High-availability as well as load-balancing is automatic.
In this mode, there is just one single proxy configuration that applies to all machines, which means that CYAN Secure Web operates with a single configuration instance. Central management in this scenario is interpreted as a feature that automatically applies any configuration changes to all members of the cluster.
Since any change to the configuration immediately applies to all nodes in the cluster, the administrator needs to manage just one single central configuration.
Central management of distributed proxy instances
The implementation of CYAN Secure Web allows to connect distributed proxy instances (e.g. in different geographical locations) to a central configuration system. Similarly to the cluster mode, the proxy instances receive the identical configuration, i.e. all instances are operated with the same configuration information.
Also in this mode, all connected instances receive the configuration changes immediately. Furthermore, particular parts of the configuration can be customized for some parts, or for all of the instances if some locations should have different needs (example: the routing and cascading settings might be different when using local Internet breakouts in the geographically distributed locations).
Central management of independent proxy instances
In the future, we will also supply the third stage of central management, in case when the web interface visualizes different proxy instances that are working 100% independently from each other but can be managed from one single point (web interface).

