1. BUILD SECURE PRODUCTS AND SERVICES
F-Secure BaseGuard

2. © F-Secure Confidential
WHAT IS BASEGUARD?
BaseGuard provides a scanning service to protect clients against virus and other harmful files, exploits, network based attacks and other security threats
Allows you to protect users against:
Malicious content
Spam or malicious s
Phishing
Malicious web sites
Allows you to filter web traffic (HTTP) based on content categories
A Software development kit (SDK) which provides scanning and content reputation check capability to third party solution and services.
© F-Secure Confidential

3. WHERE TO USE IT?
BaseGuard can be used to provide content reputation check and scanning capabilities to
DESKTOP / MOBILE
APPLICATIONS
CLOUD SERVICES
NETWORK FILTERING
SOFTWARE
GATEWAY
SOLUTIONS
Just a few examples of use, but the possibilities could be more
ISV
(independent software
Vendors)
3rd PARTY CONTENT
FILTERING SOLUTIONS
SERVICE PROVIDERS
© F-Secure Confidential

4. KEY BENEFITS © F-Secure Confidential
Gain added value by providing protection service against malicious content in files, websites, s and against unsolicited advertisements
Gain added value by managing your customers’ web access
Gain new business with mobile or desktop applications with minimum load on the device
Ensure a secure service environment for your customers
Stop malware and malicious content from users reaching your service environment
© F-Secure Confidential

5. © F-Secure Confidential
KEY FEATURES
Layered protection provided by multiple scanning engines
Real time protection provided by F-Secure cloud scanning technology (ORSP) for files and URL’s
Control web usage by URL category support
Multiple supported modes to integrate with third party solutions and services
Supports several different methods for message encryption to protect privacy
Caching support to avoid load on network bandwidth
© F-Secure Confidential

6. © F-Secure Confidential
ADDITIONAL FEATURES
High performance and fast cloud response thanks to worldwide- distributed data centers
24x7x365 cloud-based updating of URL categories both by automated routines and human F-Secure analysts
Easy product update/upgrade provided by channel
Comprehensive documentation enables smooth integration
Multiple supported modes for pattern files and product downloads through channel.
Easy to deploy and configure for a wide range of purposes.
© F-Secure Confidential

7. WHAT IS ICAP? Protocol for sending HTTP requests and responses
for another server for modification (Defined in RFC 3507)
ICAP allows any client to pass messages to services for processing.
The service processes and modifies these messages when necessary and then sends back responses to clients.
Client then use the modified content instead of the original.
© F-Secure Confidential

8. F-SECURE SECURITY CLOUD
F-Secure Security Cloud is a cloud-based digital threat analysis system operated by F-Secure Corporation.
Provides File Reputation Service (FRS) and Network Reputation Service (NRS)/URL reputation and spam prevention services.
Communicated data is encrypted.
Fast and highly scalable.
Enhances traditional malware scanning.
© F-Secure Confidential

9. © F-Secure Confidential
SOME USE CASES
© F-Secure Confidential

10. © F-Secure Confidential
As a cloud service owner, I want to protect my environment from the malicious content uploaded by the user on the cloud server
Create an ICAP client for F-Secure BG for sending the request for reputation check.
Extract the uploaded content (files) from the running service and send it for reputation check to BG server either running on the same server or on a different server (use encryption if necessary).
Client processes the reply from server and handles accordingly.
© F-Secure Confidential

11. © F-Secure Confidential
As an ISV (Independent Software Vendor), I want to create a service for protecting against malicious content in files, websites, s and unsolicited advertisements
Create a solution using F-Secure BaseGuard where the client sends the reputation check request for respective contents and get the verdict.
Process the reply
© F-Secure Confidential

12. © F-Secure Confidential
As a third party product owner, I want to have content reputation check capability for malicious files in my product
Integrate F-Secure BaseGuard into your product by creating an ICAP client that wraps the requested contents in an ICAP message.
Send content reputation check requests to the service and get the reputation back for files
Decide what to do based on the final verdict.
© F-Secure Confidential

13. © F-Secure Confidential
I want to create a mobile/desktop application for filtering malicious and harmful files and web content with minimum scanning load on my device
Create a client application for the corresponding device.
Send the reputation check request for files and web content to F-Secure BaseGuard based service running in the cloud.
Process the reply from cloud service inside client application.
© F-Secure Confidential

14. © F-Secure Confidential
As a service provider, I want to create a service for managing the web access based on the different content categories
Create an ICAP client application to send URL reputation requests to F-Secure BaseGuard.
Configure the product to allow/disallow web traffic based on content categories.
Process the reply inside client based on the verdict from scan service.
© F-Secure Confidential

15. © F-Secure Confidential
As a network administrator, I want to protect the web traffic from malicious websites and also control the access to web for different content categories
Integrate F-Secure BaseGuard through ICAP into 3rd party HTTP proxies like squid or Apache proxy.
Configure F-Secure BaseGuard to allow/disallow web traffic based on content categories
© F-Secure Confidential

16. © F-Secure Confidential
SCAN EXAMPLES
© F-Secure Confidential

17. © F-Secure Confidential
FILE SCANNING
SECURITY
CLOUD
ICAP Client (3rd party application) sends request to BaseGuard (BG) for file scan
BG sends the request to Security Cloud for scanning
Security Cloud returns the reputation of file as clean or malicious to BG
BG server sends the scanning result to client
Client processes the result as per its own requirements. 3 2
F-SECURE BASEGUARD 4 1
CLIENT APPLICATION
(ICAP CLIENT) 5
© F-Secure Confidential

18. © F-Secure Confidential
URL FILTERING SAFE URL
Client (browser) sends HTTP GET request to the proxy
Proxy sends the request to BaseGuard (BG)
BG sends request to Security Cloud for reputation check
ORSP founds the URL as safe, returns the response to BG
BG sends the request back unmodified
Proxy forwards request to the upstream HTTP server in the usual way
HTTP server respond to GET request
Client (browser) receives the browsed contents
SECURITY
CLOUD
HTTP SERVER 4 3 7 6
PROXY (ICAP CLIENT)
(E.G. SQUID) 5
F-SECURE BASEGUARD 2 8 1
CLIENT
(E.G. BROWSER)
© F-Secure Confidential

19. URL FILTERING UNSAFE URL
SECURITY
CLOUD
Client (browser) sends HTTP GET request to the proxy
Proxy sends the request to BaseGuard (BG)
BG sends request to Security cloud for reputation check
Security cloud returned that URL is unsafe and responsd to BG
BG returns an HTTP 200 response containing HTML virus warning page
Browser (client) receives the warning page, which is then seen by the user instead of the unsafe page
HTTP SERVER 4 3
PROXY (ICAP CLIENT)
(E.G. SQUID) 5
F-SECURE BASEGUARD 2 6 1
CLIENT
(E.G. BROWSER)
© F-Secure Confidential

20. © F-Secure Confidential
LICENSING & PRICING
Licensing is
User/connection based
Higher Value bands to support bigger implementation
Standard and Premium versions to support;
AV - use cases
Extended use cases with URL Category and Spam support
© F-Secure Confidential

21. © F-Secure Confidential
SUPPORT
SDK Documentation
Premium Plus support contract required
R&D escalation possibility
Support contract price is 10% of estimated licensing price or minimum of 5000 € annually
© F-Secure Confidential

22. © F-Secure Confidential
SECURITY FOR PRODUCTS AND SERVICES
A SCANNING SERVICE TO PROTECT CUSTOMERS AGAINST ONLINE THREATS
Product value proposition
EASY TO IMPLEMENT AS PART OF PRODUCTS, SERVICES AND APPLICATIONS
LAYERED PROTECTION FOR BEST SECURITY
© F-Secure Confidential

23. © F-Secure Confidential
NEW BUSINESS AND MORE VALUE
BUILD SECURE PRODUCTS AND SERVICES
GAIN ADDED VALUE WITH PROTECTION SERVICE AND WEB ACCESS MANAGEMENT
Business / IT manager value proposition
BUILD NEW BUSINESS WITH SECURE APPLICATIONS
© F-Secure Confidential

24. PROTECTION AND SCANNING THE EASY WAY
© F-Secure Confidential

25. © F-Secure Confidential
FOR ADDITIONAL INFORMATION OR TO GET BASEGUARD, CONTACT F-SECURE COUNTRY SALES
© F-Secure Confidential