Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

Cymphonix Undoes Anonymous Activity

New tool lets IT block anonymous proxies, making it harder for end users to hide their behavior online

NEW YORK -- Recently, users have been getting a raft of new tools and services that could prevent IT departments from monitoring their Internet activity. Today, however, a vendor released a tool that could let IT strike back.

Cymphonix here at the Interop conference launched Network Composer Version 7, a new release of its smart gateway appliance that doesn't just reduce unauthorized Web activity -- it also cuts down on wasted bandwidth.

Network Composer v7 offers a feature called Anonymous Proxy Guard, which lets IT departments block the usage of services such as Anonymizer and EverPrivate. These services, designed to protect the privacy of consumers and home users, allow business users to bypass corporate restrictions on Internet access and surf the Web anonymously, making it impossible for IT to track the user's online behavior.

"While many organizations have content filtering in place to control Internet usage, they have not been able to effectively detect or control the usage of anonymous proxy sites until now," says Brent Nixon, vice president of product development at Cymphonix. The new gateway release can identify traffic going through improper ports, and block the use of proxy sites, he says.

The new release would not block the use of a native browser such as Browzar, which doesn't operate as a proxy.

The new product also offers policy management features that let administrators control who can access the Internet, when they can access it, and what content they can have, Cymphonix says. For example, an organization could enforce a policy that allows the accounting department open access to the Internet after business and during the lunch hour, but block that traffic during business hours to preserve bandwidth for critical apps, the company says.

Cymphonix Network Composer Version 7 will be available in mid-October and will be offered to current users at no charge, the company states.

— Tim Wilson, Site Editor, Dark Reading

  • Cymphonix Inc.

    Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    7 Tips for Infosec Pros Considering A Lateral Career Move
    Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2020
    For Mismanaged SOCs, The Price Is Not Right
    Kelly Sheridan, Staff Editor, Dark Reading,  1/22/2020
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon Contest
    Current Issue
    IT 2020: A Look Ahead
    Are you ready for the critical changes that will occur in 2020? We've compiled editor insights from the best of our network (Dark Reading, Data Center Knowledge, InformationWeek, ITPro Today and Network Computing) to deliver to you a look at the trends, technologies, and threats that are emerging in the coming year. Download it today!
    Flash Poll
    How Enterprises are Attacking the Cybersecurity Problem
    How Enterprises are Attacking the Cybersecurity Problem
    Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2015-3154
    PUBLISHED: 2020-01-27
    CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email.
    CVE-2019-17190
    PUBLISHED: 2020-01-27
    A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORITY\SYSTEM) when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, the...
    CVE-2014-8161
    PUBLISHED: 2020-01-27
    PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.
    CVE-2014-9481
    PUBLISHED: 2020-01-27
    The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.
    CVE-2015-0241
    PUBLISHED: 2020-01-27
    The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a (1) large number of digits when processing a numeric ...