Embark on a journey of unparalleled security with Exium's innovative SASE client agent, meticulously crafted for a Zero-Trust security paradigm. Our modular approach introduces a suite of software modules, coupled with a TLS/SSL root certificate installation on endpoints, ensuring a secure display of notification pages for blocked websites and URLs.
¶ The Power of Exium's Client Software Architecture
The client agent software on Windows, MacOS, and Linux, combined with advanced Zero-Trust security controls in Exium's CyberMesh cloud, delivers the highest levels of protection for users and their devices. Our architecture, illustrated in the figure below, follows a modular design approach, offering benefits such as improved flexibility, zero-downtime upgrades, scalability, maintainability, and reusability.
¶ Key Software Modules and Their Functions
Elevate your network security with Exium SASE client services meticulously designed to safeguard against cyber threats, enhance data privacy, and enable proactive threat prevention strategies for a robust and secure digital environment.
|
Service Name |
Description |
|---|---|
| SpeerityMonitor Service |
Ensures the integrity of agent security modules by proactively monitoring for any tampering or disruption. Takes immediate corrective actions to maintain system security.
|
| Secure WireGuard Tunnel Service |
Implements the cutting-edge WireGuard encryption protocol to establish a secure and reliable tunnel between clients and Exium's CyberMesh network. Heightens data security and confidentiality across network transmissions.
|
| SpeerityTelemetry Service |
Enhances endpoint security using Wazuh for telemetry, offering real-time device posture evaluation to calculate trust scores. Empowers dynamic security policy enforcement based on precise trust score criteria for robust network protection.
|
| SpeerityControl Service |
Employs Velociraptor for advanced endpoint monitoring and swift threat response capabilities. Enables proactive cyber threat prevention measures, including host isolation upon detecting breaches or malicious activities by the SASE platform.
|
¶ Key Software Components
Ensure peak security and performance by whitelisting our software components in your AV/EDR or security software for uninterrupted protection.
Following binaries on path C:\Program Files\Speerity
|
Component Name |
Description |
|---|---|
| SASEEssentialPackage.msi | The MSI installer package installs all supporting binaries that begin with Name "SASE" within this package. |
| speerity-ng-amd64-0.5.3.3.msi | The msi installer package installs core agent. Which is mainly creates secure tunnel. |
| SASEMonitor.exe | Monitors essential services (Tunnel, Telemetry, Controller) to ensure continuous operation. Restarts any stopped service automatically with a 5-minute check interval. |
| SASEActiveResponse.exe | Removes verified threats detected by the SASE platform. |
| SASEOnOff.exe | Desktop icon link to the SASE app that toggles the Tunnel start/stop function. Facilitates SSO-based installations and initiates tunnel creation on the first click. |
| SASEVPNTest.exe | Verifies WireGuard port reachability and conducts connectivity tests. |
| SASETrayApp.exe | Tray application present in the Windows system tray, functioning as a toggle for starting or stopping the VPN service. |
| SASETrayService.exe | Backend service for the TrayApp, enabling communication between the tray application and the service. |
| SASEInstaller.exe | Installer responsible for deploying all Speerity applications. |
| speedtest.exe | Command-line utility for measuring internet connection performance. |
| wazuh-agent.exe | Leveraged for security monitoring and SIEM to detect and respond to threats. |
| Velociraptor.exe | Advanced endpoint monitoring and threat response tool used by Exium for cyber threat prevention, such as host isolation based on detected breaches or malicious activity. |
| wireguard.exe | Next-generation VPN protocol application connecting systems to the Speerity SASE platform for a secure connection. |
Emphasize your network's security and performance with a suite of powerful Exium SASE software components designed to safeguard your operations, detect threats in real-time, and ensure seamless connectivity for a reliable and secure digital experience.
¶ Exium Client Software for Mobile Devices
Exium's mobile client agents for iOS and Android seamlessly integrate the standard WireGuard tunnel. Alongside, TLS/SSL root certificates are installed on mobile devices, ensuring secure display of notification pages for blocked content.
While SpeerityMonitor, SpeerityControl, and SpeerityTelemetry modules are not currently provided for mobile devices, the Exium SASE platform guarantees comprehensive inline security. All mobile device traffic undergoes rigorous inspection and policy enforcement in the CyberMesh, offering unparalleled visibility in Exium's admin console and dashboards.
Elevate your security standards with Exium's modular SASE client software – where innovation meets robust protection!
¶ CPU and Memory Resources used by Exium Client Software
Exium's cutting-edge unified SASE and XDR agent is designed for peak performance without compromising your system's resources. This lightweight solution consumes less than 2% of CPU and approximately 50MB of memory during typical use on Windows machines, ensuring seamless operation. Best of all, you can expect similar efficiency across other device platforms. Experience powerful protection and enhanced performance without the heavy footprint!
| SASE / XDR Services | CPU | Memory | |
|---|---|---|---|
| 1 | Secure WireGuard Tunnel Service | < 1% | 6.1MB |
| 2 | SpeerityTelemetry Service | < 1% | 30.4M |
| 3 | SpeerityControl Service | < 1% | 17.0M |
| TOTAL | < 2% | 53.5M |
¶ Secure WireGuard Tunnel Service
CPU < 1%, Memory: 6.1M
¶ SpeerityTelemetry Service
CPU < 1%, Memory: 30.4M
¶ SpeerityControl Service
CPU < 1%, Memory: 17.0M
For expert guidance on implementing SASE, XDR, IAM, and GRC solutions, reach out to Exium at partners@exium.net. If you are ready to get started, check out our testing and onboarding process.