39.12 Usage Example

Company Setup:

• 1.OA System: Primarily used for daily work. The system IP is 192.168.1.2, and the port is 8080.
• 2.File Sharing Server: Used to store daily work materials and documents. The file sharing server IP is 192.168.1.1, with important company documents stored in the \192.168.1.1\private directory, which should not be shared without proper authorization.
• 3. Secure Access Gateway: The device is connected in a series, with an IP of 192.168.2.6. All machines accessing the OA system and the file sharing server pass through the Secure Access Gateway.

Required Implementation:

• 1. Restrict access to the OA system so that it can only be accessed via Internet Explorer (IE). Other browsers should be blocked. Documents on the OA system should remain in plain text while on the server. However, when employees download files from the OA system to their local machines, the files must be encrypted.
• 2. Files in the private directory of the file sharing server should be encrypted when moved from the shared location to a local machine.
• 3. For specific leaders, the above restrictions should not apply.

For the Above Requirements, the Following Settings Can Be Applied:

Settings on the Secure Access Gateway:

• ① Security Management -> Control Scope: Set the control scope to include the entire company’s network address.
• ② Security Management -> Application System Protection: Add the IP address: 192.168.1.2:8080.
• ③ Security Management -> File Sharing Protection: Choose the default port and add the IP address: 192.168.1.1.
• ④ Security Management -> Whitelist: Add the IP addresses of leaders who are exempt from the restrictions.

Settings on the AnySecura Console:

• ① Enable encryption for all clients.
• ② For all clients, go to Encryption -> Secure Communication Settings -> Application System Protection, and set:
  • Check the "Enable Protection for Application Systems" option.
  • Add the secure process as iexplore.exe and set the encryption mode to "Forced Mode."
• ③ For specific employee clients, go to Encryption -> Secure Communication Settings -> Network Shared Document Protection, and set:
  • Check the "Enable Protection for Network Shared Document Directory" option.
  • Add the Secure Access Gateway address: 192.168.2.6
  • Add the protected shared document directory as: \\192.168.1.1\private

Once the settings are complete, enable the control function on the Secure Access Gateway.