iboss

Zero trust access delivered from the cloud

The company describes iboss as a secure access service edge (SASE) and zero trust platform that now leads with artificial intelligence. Its current pitch is that it decrypts and understands every connection, then turns what it sees into answers that security leaders can act on. The background claim is that traditional security appliances cannot protect a cloud-first, mobile workforce, so the service moves protection into a cloud architecture that it says rests on more than 190 issued and pending patents and over 100 points of presence worldwide. It states that more than 4,000 organizations are protected this way.

Access policies that follow users and devices

Access to applications, data and services is decided by adaptive policies that check conditions continuously rather than once at sign-in. Role-based and criteria-based rules limit who can reach sensitive apps and data. Group-based policies can be built from Azure AD, Okta, Ping and other SAML or OIDC providers, and several identity providers can run at the same time so that users across different domains can authenticate. Step-up authentication raises the identity check for sensitive resources, and single sign-on can be applied to legacy applications that cannot perform modern authentication on their own.

Protecting against malware and data loss

Malware defense is aimed at ransomware and device infections. SSL decryption means policies still apply to encrypted traffic, data loss prevention is meant to stop sensitive information leaving, and CASB controls give in-app detail for access decisions. Remote browser isolation gives contractors, third parties and BYOD users a safe route to resources, while device posture checks confirm anti-malware, firewall and disk encryption status. Outbound firewall protection and DNS security extend coverage past the physical network perimeter, and mobile users are secured automatically whether they are in the office or out of it.

Seeing what needs protection

The platform includes application and data discovery, a built-in resource catalog, and an asset and device catalog. Resources can be labeled by type and security objective, which supports risk assessments and shows the business impact of sensitive systems. Automatic discovery and classification is intended to reduce the workload on security teams and to expose shadow IT. Logging covers every resource transaction, risk and threat reports list infected devices and high-risk users, and logs can be copied to external SIEM databases alongside ICAP, proxy chaining and log forwarding.

Connecting SaaS, cloud and data centers

Organization-owned devices, SaaS apps such as Office 365 and Teams, and cloud providers including AWS and Azure can all be connected, which takes pressure off overloaded on-premises proxies. In data centers the service can act as a drop-in proxy replacement, and terminal servers receive separate policies and logging for each user. Branch offices use IPsec and GRE tunnels for local internet breakouts to cloud security, private on-premises gateways extend the service edge inward, and dedicated cloud IPs help anchor resources for correct authorization and third-party integration. The company adds that routing traffic this way makes MPLS and SD-WAN links work more efficiently.