Imperva Skyfence provides visibility and control over cloud apps to enable their safe and productive use.
Imperva Skyfence Cloud Gateway is a cloud access security broker (CASB) that provides visibility and control over sanctioned and unsanctioned cloud apps, such as Office 365, Google Apps, Dropbox, Salesforce, Box and others. With Skyfence, organizations can discover SaaS applications in use and assess related risks, enforce controls to prevent account-centric threats, meet compliance requirements, and protect user accounts and data in the cloud.
Product Features
Cloud App Visibility and Risk Assessment
- Cloud app discovery
- Cloud app risk scoring
- Detection of compliance gaps
- Cloud app metrics
- Identification of overspend
Cloud Account and Data Governance
- Identify sensitive or regulated data in cloud file sharing services
- Identify inactive, orphaned (ex-employees), and external accounts
- Benchmark app security settings against regulations and best practices
- Leverage built-in workflow to assign and complete risk mitigation task
Real-time Activity Monitoring & Analytics
- Real-time activity monitoring and analytics by user, group, location, device etc.
- Privileged user monitoring
- Enterprise SIEM integration (Splunk, ArcSight, Q1 Labs)
- Enterprise directory integration
User Access Control & Data Protection
- Automatic anomaly detection
- Data loss prevention (in motion and at rest)
- Real-time threat prevention (alert, block an action/account, require stronger identity verification
- Risk-based multi-factor authentication enhances security without inundating IT with help desk calls
- Granular access control for managed and unmanaged (BYOD) devices
- Integration with Mobile Device Management and Single Sign-On solutions
Advanced Cloud Architecture
- Supports both offline mode using service provider APIs & inline proxy mode
- Performance optimization – provides faster access to cloud apps thru intelligent caching techniques
- Delivered on Imperva Incapsula for reduced app latency and DDoS protection of the Skyfence service
Integration with Other Imperva Products
- Integration with Imperva Incapsula provides DDoS protection, performance optimization, and a CDN
- Integration with Imperva CounterBreach for advanced anomaly detection and threat prevention
Product Benefits
Discover cloud apps & risks
- Eliminate blind spots by uncovering what cloud apps are used by employees and their risk profiles.
Prevent loss of sensitive data
- Identify sensitive or regulated data stored in cloud file sharing services
Control BYOD access
- Minimize the risk of data proliferation to unmanaged devices by enforcing device-based access rules
- Prevent downloading or syncing of data to unmanaged devices
Detect and block cyber attacks
- Monitor all user activity and analyze usage patterns to detect anomalies indicative of acct takeover
- Enforce risk-based multi-factor authentication for high-risk or anomalous activities
Identify security gaps
- Use cloud APIs to analyze cloud tenants and identify dormant, external, and inactive accounts
- Analyze cloud app security configurations to detect security gaps
Enhanced security and performance
- Faster access to cloud apps due to performance optimization techniques of Imperva Incapsula
- Protection against DDoS attacks due to Incapsula integration