CloudPassage

Server Exposure Management

Prevent exposure sprawl with policy-based configuration and software exposure detection

Halo’s server exposure management features were designed with speed of deployment, ease of use and minimal resource impact in mind. Built on the elastic Halo platform, it’s able to automatically evaluate new and reactivated servers against the latest configuration policies and software vulnerability data. Some of the key capabilities provided by the Halo exposure management features include:

• Evaluation of server configuration and operating state against user-defined standards
• Security checks for processes, files, directories, users, groups, open network ports, network/process bindings and configuration file settings
• Out-of-the-box policy templates that can be customized by the user
• Policy cloning, import, export and a rule library for convenience
• High speed, low overhead scanning allows for high frequency and on-demand assessment
• Configuration and software exposure reporting and fully detailed pass/fail compliance reports
• Scan servers one-at-a-time, in groups, or cloud-wide with accurate results in minutes

Server Firewall Management

Manage distributed iptables firewalls centrally with cloud-aware and highly automated

CloudPassage Halo

The Halo firewall management solution was designed to make system administrators’ lives easier through deep automation, transparent cloud-awareness and an easy management interface. Some of the key features include:

• Intuitive graphical web interface for creating iptables policies without iptables syntax knowledge
• Rule creation via user-defined server group memberships, IP ranges and application service
• Highly flexible design allows policies and server membership in groups to be changed as needed
• Group-based server policy assignment with automatic updates as group members change
• Automatic pushes of manual and automatically-generated rule changes via the Halo Deamon
• Realtime visibility of server firewall, policy and network configuration status
• Cloudbursting, server cloning, migrations and offline server images are all transparently addressed