¶ Exium's SASE - Geographically-Aware Outbound Traffic Controls
In the dynamic landscape of cybersecurity, securing outgoing traffic is as critical as fortifying inbound threats. Exium's Secure Access Service Edge (SASE) solution offers a pioneering approach by implementing egress traffic controls based on destination geography. This ensures comprehensive protection by allowing IT administrators to configure security policies tailored to the organization's unique needs.
¶ Key Features
|
No |
Key Capabilities of Egress/ Outbound Traffic Controls |
|---|---|
| 1 |
Geographical Precision
|
| 2 |
Domain and IP Address Filtering
|
| 3 |
Tailored Security Policies
|
| 4 |
Real-Time Threat Intelligence
|
¶ Benefits
Enhanced Security Posture: Geographically-aware outbound traffic controls bolster your organization's security posture, offering a proactive defense against region-specific cyber threats. This level of granularity ensures a more resilient security infrastructure.
Compliance Adherence: Aligning with various compliance standards is simplified with Exium's SASE. Customizable policies enable organizations to meet regulatory requirements by controlling outbound traffic based on geography, domains, and global IP addresses.
Operational Efficiency: Exium's solution strikes a balance between security and operational efficiency. Tailored policies allow organizations to facilitate legitimate outgoing traffic while preventing unauthorized access, ensuring smooth business operations.
User-Friendly Configuration: The user-friendly interface of Exium's SASE solution simplifies the configuration of geographically-aware outbound traffic controls. IT administrators can effortlessly define and manage policies to suit the organization's specific security needs.
¶ Configure Egress/ Outbound Traffic Policy Controls at Workspace
Exium's SASE solution transforms outbound traffic security by introducing geographically-aware controls, providing a robust defense against cyber threats. With the ability to customize policies based on destination countries, domains, and global IP addresses, organizations can fortify their cybersecurity posture while maintaining operational efficiency.
You can define Egress/ Outbound Traffic policies at workspace level which will be applied to all users in the workspace. To create Egress/ Outbound Traffic policies, Follow below steps
- Log into the partner admin console and navigate to the company workspace.
- To enable Egress Geo controls for remote users, you will need to activate Conditional Access in the workspace. The Egress Geo controls at sites (Cyber Gateways) does not require Conditional Access.
- Click on Zero-Trust Policies and then Click on Geo Controls in the left menu bar.
- On Geo Controls page, Click on Egress Geo controls tab
- Select all countries you want to BLOCK egress traffic, as shown below
- Click Update as shown below
After Submit, Egress Geo Controls will be applied on the traffic in near realtime and traffic will be blocked accordingly.
¶ Configure Egress/ Outbound Traffic Policy Controls at Site level
If you have Multi-Interface Cyber Gateways installed at a site, you can define Egress/ Outbound Traffic policies at site level which will be applied to all users and devices at that site. To create Egress/ Outbound Traffic policies, Follow below steps
- Log into the partner admin console and navigate to the company workspace.
- Click on Sites in the left menu bar and Click on Local Policies. Click on Geo controls tab.
- Select a Gateway from drop down and click on Create, as shown below
- select all countries you want to BLOCK egress traffic and click on Update as shown below
After Submit, Egress Geo Controls will be applied on the traffic in near real-time and traffic will be blocked accordingly.
¶ Egress Geo Controls - Create exceptions as policy rules
Egress Geo Controls blocks both domains and IPs belong to that country which is added in BLOCK list. If there is a requirement to allow a particular domain or IP, that can be added as exception policy rules.
Please note in the reference screenshots, Germany is added to BLOCK list and partner wants to add sth-berlin.de (and its associated domains and IPs) as exception rules.
¶ Egress Geo Controls - Create Domains as exception
To add domains as exception policy rules, please follow below steps.
- Logg into the partner admin console and navigate to the company workspace.
- Click on Zero-Trust Policies and then Click on Rules in the left menu bar.
- Enter a Name, Set Action as Allow, Select Type as Content, Select Content Type as Custom Domains, Enter all Domains, Click on Save as shown below.
For more details on creation of domain based policy rules, please refer Web Domain Policies section in Web and SaaS Security doc.
¶ Egress Geo Controls - Create IPs as exception
To add domains as exception policy rules, please follow below steps.
- Logg into the partner admin console and navigate to the company workspace.
- Click on Zero-Trust Policies and then Click on Rules in the left menu bar.
- Enter a Name, Set Action as Allow, Select Type as IP, Enter IP or Subnet, Click on Save as shown below.
For more details on creation of domain based policy rules, please refer IP(Firewall) Policies section in Web and SaaS Security doc.
¶ Egress Geo Controls - Blocked Domains and IP address
User sessions get blocked when they try to access any destination IPs belong to the countries which are part of BLOCK list. All the events gets captured part of Blocked Threats/Policies page.
¶ Blocked Domains and IP address
You can view all blocked Geo controls under Blocked Threats/Policies as shown below. To view blocked threats, follow below steps.
- Click on Dashboards in the left menu bar and Click on Blocked Threats/Policies.
- Search for Geo in Searchbox as shown below.
Experience the Exium advantage and take your cybersecurity strategy to new heights. With Exium, you're not just protected – you're empowered. To learn more about implementing SASE for your organization and explore tailored solutions that meet your unique requirements, contact Exium at hello@exium.net for a consultation or demonstration.