Scanning at the Point of Entry

Network security software provider Perfigo says its new component can help prevent infections on the network caused by mobile workers returning home with a worm or virus.

The San Francisco-based company today announced a new add-on for its CleanMachines policy enforcement security solutions called SmartEnforcer. It will actually scan systems right down to the Windows registry, to do a full "device-based interrogation."

"We realized our customers were reeling with worm infections and more -- and mobility was a big part of that problem," says Rohit Khetrapal, president of Perfigo. "There had to be a way for machines to be scanned at the point of entry."

He says the SmartEnforcer agent will make the process of finding these problems automatic. It will scan for problems and quarantine any users that come back tagged as infected or vulnerable. Such users are kept separate from the rest of the network resources -- perhaps getting limited Internet access, for example, as IT sees fit -- while SmartEnforcer tries to fix the problem by pushing down OS updates, new virus definitions, or whatever might be necessary. Companies can make the user do a self-directed download if they prefer, sending them to whatever Web site might have what they need. However, they can't join in the regular network until they're added to the "clean list."

"Next time you go on the domain you don't have to go through this," says Khetrapal, "unless there's a new vulnerability [to be scanned for]."

Perfigo offers CleanMachines for policy enforcement on end-user devices, and also has a product called SecureSmart for enforcing policies at the time of user authentication. They work together to make sure the right type of scan takes place.

SmartEnforcer with CleanMachines will sell as a bundle for $20,000 with a license to support up to 1,500 end-users.

Perfigo also announced this month that it is partnering with network equipment maker Netgear to co-market each company's products. Netgear will be building Perfigo's network management and security into products such as the ProSafe line of wired and wireless products.