Deployment

Fidelis Security Systems has developed a full family of network security solutions that can be deployed to specific areas of the network, giving you the control and visibility where you need it most to prevent data leakage and cyber attacks.  Simply deployed as a context-aware network (or virtual) appliance, Fidelis XPS provides the industry’s quickest time-to-value and ease of management with its management console’s award-winning graphical user interface.

Fidelis XPS CommandPost - A Fidelis XPS deployment consists of a Fidelis XPS CommandPost, the web-based enterprise management console where the sensors are administered and managed, and one or more sensors placed in the network to manage the visibility and control of your network’s information flow. 

Fidelis XPS Direct - Organizations typically begin their comprehensive information protection with Fidelis XPS Direct at the internet gateways, enabling comprehensive visibility and control across all outbound traffic.  Once deployed and detecting data breaches, organizations then place controls on rouge channels where business is not meant to occur.  Since Fidelis XPS Direct is the only product to prevent across all 65,535 ports and direct-to-internet traffic, it enables prevention wherever and however an organization is comfortable.

Fidelis XPS Proxy and Fidelis XPS Mail - To control official communication channels, organizations use Fidelis XPS Proxy and Fidelis XPS Mail. The Fidelis XPS Proxy sensor offers standard ICAP interface to web proxy servers to control the organization’s web browsing traffic by providing inspection of SSL traffic (when supported by the proxy) and policy-based user notification.  Fidelis XPS Mail gives an organization graceful control of corporate e-mail with its flexible deployment modes, supporting MTA or Milter modes, it provides the ability to quarantine messages that violate policy or redirect them to secure e-mail gateways for encrypted delivery.  

Deployment of Fidelis XPS Direct, Fidelis XPS Proxy, and Fidelis XPS Mail enables an organization to place a “safety net” around their network perimeter.  Additional Fidelis XPS sensors are available to provide comprehensive information protection for specific network requirements, such as:

Fidelis XPS Edge - For organizations with remote locations or branch offices, typically with lower bandwidth requirements, Fidelis XPS Edge brings the complete network sniffing capabilities of Fidelis XPS Direct and the ICAP functionality of Fidelis XPS Proxy to a single appliance. Fidelis XPS Edge is designed to simplify deployments of network data protection at the internet gateway for these kinds of organizational locations.

Fidelis XPS Internal - To protect sensitive data and prevent it from leaving your internal networks, deploying Fidelis XPS Internal establishes an internal “zone of control” to protect your data centers and department/divisions.  Fidelis XPS is the only network data breach prevention solution to address internal traffic, enabling protection of your databases, file sharing, and directories.  Fidelis XPS Internal is typically deployed at the data center first, to gain visibility and control to the information leaving the well-controlled data center to lesser-controlled devices around the enterprise.  Next, organizations deploy Fidelis XPS Internal at business partner connections to inspect traffic to these trusted third parties who have significant access to your network.  Finally, Fidelis XPS Internal is deployed at key points in the network to implement “zones of control” between an organization’s divisions or departments.

Fidelis XPS Connect - By using Fidelis XPS Connect, an organization can extend business critical content-awareness to the entire enterprise by leveraging Fidelis XPS' core architecture, including purpose-built document decoding, content analysis, and content policy definition technologies.  Complementary security solutions in your network security infrastructure can easily add Fidelis XPS content-awareness in order to enforce policy-based decisions regarding the storage, transfer, or movement of enterprise data.