Onderwerp: Tech Article: HTTP Content Filter Analysis - Finjan SurfinGate V5.6

################################################## ###########
#
# COMPASS SECURITY http://www.csnc.ch/
#=20
################################################## ###########
#
# Topic: Tech-Article
# Betreff: HTTP/S Content Filter Analysis - Finjan SurfinGate V5.6
# Autor: Jan Monsch & Ivan Buetler
# Date: 27. January 2003
#=20
################################################## ###########

Dear Reader

As you might know - malicious mobile code contamination via web download=20
becomes a real threat. HTTP content filter techniqe promises protection a=
t=20
your perimeter infrastructure. While penetrating the clients' infrastruct=
ure=20
during a pen-test job, we are ready to use bypass technique in order to=20
successfully exploiting the clients security mechanism. This article is=20
focussed in Finjan SurfinGate HTTP content filter protection - and gives =
you=20
a better understanding of threats and risks.=20

We have used Finjan SurfinGate V5.6. The new V6.0 is already available.=20

Find the analysis:

http://www.csnc.ch/downloads/docs/te...Analysis_CSNC=
_V3.0.pdf

Kind Regards

Compass Security TEAM

Finjan Response to Compass Security's
"HTTP/S Content Filter Analysis - Finjan SurfinGate V5.6"
Dated January 27, 2003


Finjan Software, the leading provider of proactive content security
management solutions for global companies, is pleased to be recognized =
by
Compass Security as one of the leading providers of powerful content
filtering capabilities for a comprehensive network security strategy. =
The
publishing of Compass Security's "HTTP/S Content Filter Analysis - =
Finjan
SurfinGate V5.6" provides some valuable analysis to system =
administrators
trying to build a complete content security solution for their
organizations. It is the philosophy of Finjan Software that multiple =
layers
of protection using different technologies is the way to achieve that =
goal.
Finjan's SurfinGate performs a content analysis in the gateway level, =
and
Finjan's SurfinShield Corporate monitors the behavior of active content =
in
runtime. Both of the products offer also content control features, e.g.
blocking certain file types.

SurfinGate 5.6 was released in February 2001. Since that time, the =
dangers
of malicious mobile code has increased and become more complex. This has
driven technological advancements in the area of proactive code =
inspection
to be incorporated into our products. Our current product version,
SurfinGate 7.0 for Web, was announced in November 2002 and is a much =
more
robust security solution than the product released two years ago.

Unfortunately, many of the conclusions of the Compass Security analysis =
are
no longer accurate when applied to the current SurfinGate 7.0 for Web
product.

Some of the reported issues will be resolved in an upcoming service =
pack.
The security of the products is constantly improved based on ongoing
security evaluations by Finjan Malicious Code Research Center (MCRC). =
The
new generation of Finjan Software products are flexible, and can be =
managed
easily. Information garnered from our current installed base of over 1.6
million users has a direct effect on the products. Finjan also holds
bi-annual worldwide CAB (Customer Advisory Board) meetings to collect
further input from the field.

Finjan Software thanks Compass Security for the analysis, and invites it =
to
test the new version.

Detailed response can be found at:
http://www.finjan.com/mcrc/FinjanSur..._CSNC_V3.0.pdf


--
Regards,
Menashe Eliezer
Manager, Malicious Code Research Center
Finjan Software
http://www.finjan.com/mcrc

Prevention is the best cure!

*****************************
Finjan Software

This e-mail and any attached files are confidential and may be legally
privileged. The unauthorized use, disclosure or copying of this email or
any information contained within it is strictly prohibited. This also
confirms that Finjan Software's SurfinGate for E-Mail has scanned this
message for the presence of known viruses and potentially malicious
code.

Finjan Software - Prevention is the Best Cure!
*****************************