What is QualysGuard?
QualysGuard is an online fraud protection service from thawte that analyses your network for potential security vulnerabilities. It does this by mapping all your IP devices and isolating potential weaknesses in your IT infrastructure set-up.

Why is this important?
Most online activities are open to some form of attack. E-commerce, email and many web-based business processes, if compromised, can result in large losses to you and your customers.

By identifying real and potential weaknesses, QualysGuard provides a tested and highly effective way to proactively monitor and assess your network on an ongoing basis.

How does it work?
Very simply! QualysGuard is host-based and probes your network perimeter from the outside – just as an intruder would. There is no software to install and nothing to configure.

You are then provided with essential information to assist you to measure your security, manage your risks, and eliminate vulnerabilities before unauthorized intruders can exploit potential security holes.

Why choose QualysGuard?
QualysGuard is a no-fuss solution to a potentially devastating problem. It requires no training, no downloads and is completely scalable.

benefits
QualysGuard is appropriate for networks of all sizes. It offers unparalleled features and benefits:

• Affordability and flexibility : regardless of the size of your network, the QualysGuard solution comes in a flavor to suit you.
• Ease of use and immediate implementation : no training or additional equipment required, and no software to install.
• Speed : QualysGuard completes typical scans in a matter of minutes
• Regular security update scheduling : scanning intervals and timings are fully programmable for automatic network security audits, ensuring 24/7 vigilance.
• An online database containing the very latest information : the QualysGuard online database is updated daily with new tests that target newly discovered vulnerabilities.
• Detailed and user-friendly graphical reports : security risks are ranked, and recommendations are provided to enable you to carefully plan the implementation of fixes.

As part of thawte's dedicated drive to help make the Internet a secure and viable platform for commerce and the distribution of content, we have partnered with Qualys to provide you with a product that ensures the security of your IT infrastructure.

what does it do?
QualysGuard is an online fraud protection service which assesses the security of your network by:

• Identifying accessible devices on your network perimeter.
• Analyzing the findings by accessing a knowledge base of information on latest security issues.
• Generating comprehensive reports detailing your network vulnerabilities and possible remedies.

Phase 1: Identification Phase
Once you supply us with relevant details (domain name and IP addresses), QualysGuard is able to scan and identify all your network devices accessible via the Internet, and therefore vulnerable to threats.

These devices may include the following:

• Routers
• Switches
• Hubs
• Firewalls
• Web servers
• Mail exchangers
• UNIX and NT servers
• Workstations
• Desktop computers
• Other network appliances

• Ongoing monitoring of credible hacking websites
• A partnership with Security Focus, a leading publisher of security vulnerabilities

Qualys performs "brute force" scans, which test hundreds of thousands of passwords against systems. Hackers commonly use this technique to crack password protection schemes.

Phase 3: Reporting
Qualys generates graphical, easy-to-understand HTML reports that include:

• Summary information
• Network information
• Host information
• Details of detected vulnerabilities
• Severity levels
• Potential consequences R
• ecommended fixes (with patches where applicable)

  An Executive View report is also provided. This depicts a global view of the security levels of all networks and IP addresses, along with any changes since the last scan.

  is this the right product for my business?
  All your online functions, including e-commerce, e-mail and Net-linked business processes, are vulnerable to potential attacks. These attacks are unfortunately becoming more sophisticated. As businesses rely more on the Internet for communication and business activities, they will increasingly turn to solutions that offer vigilant and proactive network supervision.

  QualysGuard anticipates and meets upcoming threats to ensure stable business growth and customer satisfaction.

  QualysGuard:

  • Evaluates the security of your networks remotely… from a hacker's perspective.
  • Proactively alleviates risks as they emerge, and before the damage is done
  • Identifies 'real-world' weaknesses that would elude traditional security solutions such as firewalls.
  • Examines all your accessible devices such as servers, firewalls and switches to check for the latest and most threatening vulnerabilities.
  • Runs more than 800 tests, based on Qualys's up-to-date vulnerability knowledge base which is continuously updated through strategic partners and specialist engineers
  • Provides detailed reports that measure and qualify network security threats, and proposes appropriate fixes.

  QualysGuard is a Network Security Audit solution that is backed by thawte's excellent local representative and online support. If your business runs a network that conducts operations using the Internet in any manner, QualysGuard is a highly recommended fraud protection security measure.

  How does QualysGuard work?
  QualysGuard provides you with essential information to measure, manage, and eliminate security vulnerabilities on your network/s before unauthorized intruders can exploit them.

  Does my business need QualysGuard?
  Online functions such as e-commerce, e-mail and Net-linked business processes, are vulnerable to potential attacks. The results of these attacks could be devastating to both you and your customers. Most businesses that use the Internet would benefit from the essential protection offered by QualysGuard.

  What is Network Security Auditing?
  Network Security Auditing is a process that identifies network computing equipment and the security vulnerabilities associated with these devices. Information acquired from a Network Security Audit can be used to:

  • Measure security
  • Manage risks
  • Eliminate security vulnerabilities before unauthorized intruders can exploit potential security holes

  Do I need additional equipment to utilize QualysGuard?
  No specialized equipment is required, and the QualysGuard application is accessible through a standard online browser.

  What does QualysGuard detect?
  QualysGuard gathers and analyzes information from all devices within a network, including the following:

  • Host Information - QualysGuard scrutinizes your network by running scans and checks on all specified parts of your IP-based networks. It then maps servers, workstations, routers, firewalls, switchers, printers, hubs, and other network appliances into easy-to-understand tables and charts.
  • Network Vulnerabilities - QualysGuard uses its immense knowledge base of vulnerabilities to find weakness in the following:
    Routers
    Administrable Switches
    Administrable Hubs
    Operating Systems
    Firewalls
    Web Servers
    FTP Servers
    LDAP Servers
    Load Balancing Servers
    Databases
    E-commerce
    DNS and bind
    Back doors and Trojan horses
    Brute force attack
    CGI
    Databases
    E-commerce
    File Transfer Protocol
    Firewall
    MS Front Page
    General Remote Services
    Hardware & Network appliances
    Information services ( NIS , LDAP, WHOIS)
    Information gathering
    Mail services
    News server
    SMB/Netbios Windows file sharing
    SMTP and Mail Transfer
    SNMP
    TCP/IP
    Web server
    MS Windows
    X-Window

  How often should I run audit checks?
  New security holes are identified every day. These are added to Qualys's knowledge base of threats. You should therefore schedule audits regularly to minimize potential risk and ensure constant security.

  Can QualysGuard schedule and repeat different audits?
  QualysGuard enables you to create multiple custom sessions and schedule them to run immediately, on specific dates, or on a recurring daily, weekly or monthly basis. The scheduling feature ensures that scans are run automatically on a regular basis, and reduces the time necessary to set up and launch sessions.

  What are QualysGuard's reporting capabilities?
  QualysGuard generates easy-to-comprehend graphical reports that provide detailed security summaries on the following elements of your network:

  • Firewalls
  • FTP servers
  • Web servers
  • Operating systems
  • Desktop computers
  • Workstations
  • CGI bins

  QualysGuard also reports on the results of brute force attacks.

  Do I Need Qualys if I have a digital certificate?
  Your SSL certificate protects sensitive information that is sent to your Web server via the Internet. If this information is not stored securely once it is on your network, however, it may still be obtained or altered through vulnerabilities in your network security.