WaterBox

WaterBox

CSS United End-Point Management System
1.1 Endpoint security management
1.1.1 Endpoint health check
Computers must be checked before accessing to the internal resources. The check strategy includes: whether installing the antivirus software and whether installing the operating system patches.
1.1.2 Security policy management
The security policy includes:
Monitoring account password
Monitoring account lockout
Monitoring audit policy
Monitoring sharing policy
Monitoring screensaver policy
1.1.3 User authentication
Authentication based on the USB Key
Checking on legality of the user permission
1.1.4 Network process management
The network process management can help us to realize that people cannot access to the network without the legally permission, and unauthorized network process cannot connected with the extranet.
1.1.5 Antivirus software monitor
Monitoring the operating situation of antivirus
Monitoring the self-definition character of antivirus software
1.1.6 Patch distribution management
Main functions: formulating the integrated patch management strategy, realizing the integrated updating management.
1.1.7 To securely delete files
Clearing IE cache
Clearing IE address bar
Clearing IE history
Clearing COOKIE
Clearing system TEMP directory
Clearing recently opened documents
Clearing the run commands
Clearing the recycle bin

1.2 terminal operation and maintenance management
1.2.1 package management
Package distribution
1.2.2 software and hardware asset management
Obtaining the asset information.
Software management policy
Hardware management policy
Setting hardware baseline
1.2.3 monitoring system operation
Monitoring information management
Obtaining system information
1.2.4 Helping remote users
Remote massage transition between Server and end client.

1.3 User behavior management
By controlling the means of the information leakage to protect sensitive enterprise information, prevent users from leaking sensitive information by misuse or irregular behavior.
1.3.1 Network behavior management
Standardize the computer users network access behavior based on business relevance and importance of secrecy, build up a trustful virtual LAN security net. There are two means of network protection: first, prevent users misusing or deliberate leaking out of sensitive information; second, prevent hackers illegally obtaining sensitive information by getting through firewall. Multi-level protection from the network layer to the application layer is achieved, and specific functions are listed as follows:
Protection of the network layer: IP address access control, TCP/UDP/ICMP protocol control;
Protection of the application layer: HTTP/ FTP/ TELNET/ SMTP/ WEBMAIL/ BBS/ NETBIOS control;
1.3.2 Illegal outreach control
Monitoring the illegal outreach by controlling modems.
1.3.3 Storage medium management
Achieving unified storage medium management based on the enterprises medium control policy of the computer users, and set up unified medium control policy according to users security level and business relevance. Specific functions are listed as follows:
Mobile storage medium control:
CDROM/CDRW control:
Second storage disk control:
1.3.4 Printer management
Set up unified printer management policy, according to enterprises printer management regulation and users business relevance. Specific functions are listed as follows:
Monitoring the users printing behaviors:
Irregular printing behavior alerting:
1.3.5 Interface management
Set up unified computer interfaces control policy, shutdown and open interfaces dynamically. All the interfaces that can be controlled are: USBSCSISerial busParallel busPCMCIAFloppy94Infrared connectionWireless Ethernet cardDVDCD-ROMBluetoothSecond Ethernet card.

1.4 Data security management
1.4.1 My encrypt folder
My encrypt folder provides encryption services for the user, and files that dragged into the folder will be encrypted, and they are decrypted when accessed by the right user.
1.4.2 File safety deposit box
File safety deposit box is an encrypted space in the hard disk, and files stored in the box are encrypted, the box will be invisible when unloaded.
1.4.3 Safe file distribution
Safe file distribution function enables files translating in groups or domain, automatically encrypt or decrypt.
1.4.4 File safety management
File safety management function is based on crystal encryption and decryption technology, files that stored in the terminal computer will be enforced encrypted or decrypted.
1.4.5 Trusted storage medium management
Files that stored in the trusted storage medi