Why URL Filtering is not Enough

The Web is experiencing explosive growth.

With one new domain coming online each second, static database-driven solutions can’t possibly keep up. In fact, of the 400 million URLs online, only 100 million of those are actually classified by traditional URL filtering solutions. And malware authors know not to use those that are classified.

Dynamic, AJAX-based applications treat the browser as an operating system.

The growing complexity of browser-based applications creates new targets for hackers to exploit, with sensitive data and business logic completely exposed. There is no program or executable downloaded, so there is no file to scan. Users don’t have to click on anything to be compromised.

User-generated content can’t be trusted.

Millions of consumers post content online. In fact, more than half of the top 100 Web sites are based on user-generated content – including social networking sites, feedback forums and more. This leaves a void in online trust when it comes to communication, collaboration and commerce online and from your network.

HTTP has become the hiding ground for botnets and rogue applications.

Masquerading as HTTP allows the malicious applications to bypass network firewalls and IPS completely undetected. With some 300,000 new bots detected each day, it’s no wonder that one in 20 companies has bots in its network.

Laptops are not protected outside of your building – Some 20% of the workforce works remotely full time.

The corporate perimeter extends far beyond the office walls, yet your protections do not. Employees are just as likely to browse the Web from their laptop in a hotel, coffee shop or home as they are in the workplace. Existing Web security solutions require VPNs and bandwidth-hungry backhauling for some partial protection.

Mobile Web traffic is completely unprotected.

Employees continue to use personal mobile phones and PDAs for business, sparking heightened security concerns for businesses and Web use increases from these devices. In fact, 73% of companies have BlackBerry users, and 15% of users regularly access the Web from their mobile devices.

Enterprises are realizing the benefits of cloud computing and software-as-a-service (SaaS).

There is a shift towards decentralizing enterprise networks and eliminating the need to backhaul traffic to corporate headquarters. Studies show that 92% of organizations are open to SaaS-based security as a platform that extends protections outside of the network, reduces costs, relieves the need for in-house security expertise, and helps companies reach their strategic infrastructure goals more quickly.