Cyberoam

Cyberoam

Company type	Private
Industry	Network security, Computer Security, antivirus, computer software
Founded	1999
Founder	Hemal Patel Ben Casado
Headquarters	Ahmedabad, (India)
Products	Firewall, Unified Threat Management for network security, Cyberoam Central Console for centralized security management, Cyberoam iView for centralized visibility, Cyberoam NetGenie for secure homes and small offices
Number of employees	550+ (Q3 2014)
Website	cyberoam.com

Cyberoam Technologies, a Sophos subsidiary,[1][2] is a global network security appliances provider, with presence in more than 125 countries.

Business field

The company offers user identity-based network security in its firewalls and Unified Threat Management appliances, allowing visibility and granular control of users' activities in business networks.[3] For SOHO, SMB and large enterprise networks, this ensures security built around the user for protection against APTs, insider threats, malware, hackers, and other sophisticated network attacks.

Cyberoam has sales offices in North America, EMEA and APAC. The company has customer support and development centers in India with 550+ employees around the globe. It has a channel-centric approach for its sales[4] with a global network of 4500+ partners. The company also conducts training programs for its customers and partners.

Product overview

Cyberoam's product range offers network security (Firewall and UTM appliances), centralized security management (Cyberoam Central Console appliances), centralized visibility (Cyberoam iView), and Cyberoam NetGenie for home and small office networks.

Cyberoam network security appliances include multiple features like a Firewall – VPN (SSL VPN and IPSec), Gateway Anti-Virus, Anti-Spyware and Anti-Spam, Intrusion Prevention System (IPS), Content and Application Filtering, Web Application Firewall, Application Visibility and Control, Bandwidth Management, Multiple Link Management for Load Balancing and Gateway Failover,[5] over a single platform.

Cyberoam security training academy

Cyberoam has affiliations with NESCOT (North East Surrey College of Technology) – its first Master UK Training Academy. NESCOT offers Cyberoam certified security courses which include an entry-level class named 'CCNSP' (Cyberoam Certified Security Professional)[6] and an advanced-level course named 'CCNSE' (Cyberoam Certified Security Expert).[7]

Security flaw in HTTPS traffic inspection

A Tor Project researcher and a Google software security engineer revealed in July 2012 that all Cyberoam appliances with SSL traffic inspection capabilities had been using the same self-generated CA certificate by default.[8] This made it possible to intercept traffic from any owner of a Cyberoam device using another Cyberoam device – or even to extract the key from the device and import it into other DPI devices, and use those for interception.[9]

In response, Cyberoam issued an over-the-air update for its unified threat management (UTM) appliances[10] in order to force the devices to use unique certificate authority (CA) SSL certificates when intercepting SSL traffic on corporate networks.[11] After the hotfix was applied,[12] each individual appliance was required to have a unique CA certificate.

References

1. Sophos Acquires Cyberoam Technologies - Cyberoam Press Release, 10 Feb 2014
2. Lennon, Mike (10 February 2014). "Sophos Acquires Network Security Firm Cyberoam Technologies". Security Week. Retrieved 12 November 2024.
3. UTM Reviews - By Peter Stephenson, SC Magazine, 1 December 2011
4. Cyberoam to increase partner base by 25% before March 2012 Archived 2015-04-02 at the Wayback Machine - By ChannelWorld Bureau, 22 Feb 2012
5. Cyberoam CR1000ia-Product Review - By Peter Stephenson, SC Magazine, 5 Jan 2012
6. Cyberoam Certified Network & Security Professional (CCNSP) Archived 2014-09-21 at the Wayback Machine - CourseKing, Nescot
7. Cyberoam CCNSE training Archived 2016-10-23 at the Wayback Machine - VCW Security
8. TOR project uncovers flaw in mass-surveillance appliance - By Cory Doctorow, Boing Boing, 3 July 2012
9. Cyberoam deep packet inspection and certificates - By Nathan Willis, LWN, 11 July 2012
10. Cyberoam updates UTM certs to avoid traffic snooping - By Darren Pauli, SC Magazine Australia, 11 July 2012
11. Cyberoam’s Proactive Steps in HTTPS Deep Scan Inspection Archived 2013-05-07 at the Wayback Machine - Cyberoam Blog, 9 July 2012
12. Cyberoam Fixes SSL Snooping Hole in Network Security Appliances - By Lucian Constantin, IDG News Service, 9 Jul 2012

External links

• Cyberoaks - Official Website