Bank shuts down malicious web traffic and shadow SaaS with a Secure Web Gateway

Where the pressure started.

Employees browsed the internet from corporate networks and remote sites with only basic filtering in place. Phishing links, malicious downloads and unsanctioned cloud apps were slipping through, and the security team had no clear view of what people were reaching. SaaS adoption inside the bank was growing faster than security policy could keep pace with, and regulators expected demonstrable controls on how corporate data left through the browser.

Designed for the real operating environment.

• Designed and deployed a Secure Web Gateway covering all employee internet egress from the corporate network and VPN.
• Enabled URL filtering and category-based web access control aligned to the bank's acceptable use policy.
• Configured malware and phishing protection with real-time threat intelligence.
• Turned on SSL/TLS traffic inspection with appropriate privacy exclusions for banking, healthcare and government categories.
• Implemented user and group-based access policies backed by Active Directory, so controls follow the person, not the device.
• Set up application usage monitoring to surface shadow SaaS and bring high-risk apps into a controlled workflow.