Security & Identity

Yes. Staff, contractors and partners sign in from many devices and places, and a leaver's forgotten account can stay open for months. An administrator closes all of a user's sessions in one step.

Each connection is compared with signatures that describe attack patterns. The action of a matching signature can be alert, drop or reject.

Every member of a group inherits the role assigned to it, and that role becomes a permission in the connected app. A user without a role is not allowed to sign in.

The Firewall allows or denies traffic by IP address, port and application. Intrusion Detection & Prevention inspects the content of the traffic that is allowed.

No. Users keep signing in with their Active Directory password. The directory connector installed on your network opens only outbound connections, with no inbound ports, and an account disabled in the directory stops signing in at once.

Server-to-server inspection runs on top of the distributed firewall, so it is used together with Micro-segmentation.