Sterling Secure Proxy

The Internet remains risky for file transfer

IBM Sterling Secure Proxy is a demilitarized zone (DMZ)-based application proxy that protects your file transfers from the public Internet.

IBM Secure Proxy is a demilitarized zone (DMZ)-based application proxy that protects your file transfers from the public Internet, by enforcing tight controls including trading-partner authorization, multi-factor authentication and session break, before the transfer ever enters your trusted zone

SSL session breaks and multi-factor authentication – Help guard against unauthorized access and reduce data vulnerability to protect your brand
Leverage the Internet - Lower your file transfer costs and grow your file transfer community while securing the data and access to your trusted zone
Firewall navigation best practices – Increases perimeter security for your file transfer infrastructure to comply with regulatory policies and pass tougher security audits
Self-service logon portal – Provides self-service password management for trading partners reducing the dependency on IT staff
Sterling Secure Proxy is available as licensed on premise software

Sterling Secure Proxy provides you with a truly secure B2B file transfer. Keep your files in the right hands- and out of the wrong ones - with capabilities that include:

Application proxy

Resides in the demilitarized zone (DMZ)
Supports IBM® Sterling Connect:Direct®, IBM® Sterling Connect Express® and IBM® Sterling B2B Integrator servers
Support for multiple DMZ environments
Supports FTP, FTPS, HTTP, HTTPS, SSH/SFTP, PeSIT and Sterling Connect:Direct protocols

Firewall navigation best practices

Prevents inbound holes in the firewall
Minimizes rich targets in the DMZ by ensuring that files, user credentials and data are not stored in the DMZ
Establishes sessions from more-trusted to less-trusted zones
Enforces internal and external security policies

Perimeter security

Prevents direct communications between external and internal sessions by establishing secure session breaks in the DMZ using SSL or TLS
Inspects protocol and sensitive control information, enabling configurable error handling for violations
Session limits and data encryption guard against Denial-of-Service attacks

Authentication Services

Customizable logon portal provides self-service password management for trading partners
Supports single sign-on and integrates with existing security infrastructure, including Active Directory and Tivoli user databases
Multifactor authentication enforces tight controls and validation of trading partner identity in the DMZ before information is passed to the trusted zone
Authentication options include IP address, user ID and password, digital certificates, SSH Keys, RSA SecurID

Clustering

One central configuration manager pushes out configuration rules to multiple engines running in the DMZ, making it easy to scale
Clustering for high availability and load balancing provides operational continuity and improved performance

IBM Software

See what smarter software can do for you