Skip to content

L7 Enforcer

Akonix L7 Enforcer™ delivers perimeter security to detect and block unauthorized use of high-risk and evasive public instant messaging (IM) and peer-to-peer file sharing (P2P) applications on enterprise networks. Deployed alongside Akonix L7 Enterprise to block users from circumventing the gateway or as standalone perimeter security, Akonix L7 Enforcer detects, reports, and selectively blocks unsanctioned IM and P2P network traffic.

Akonix L7 Enforcer combines deep packet inspection with comprehensive protocol signature recognition to provide accurate detection and blocking of the major P2P and public IM applications. Utilizing an asynchronous, pass-by architecture, L7 Enforcer will not degrade network performance or act as a single point-of-failure, unlike in-line devices such as firewalls.

Akonix L7 Enforcer delivers:

  • Flexible policy settings enabling IT managers to manage and define how individual protocols are handled (such as selecting to actively block or passively monitor and report on). IT managers can create an exception list for a specific or a range of IP addresses for highly granular access control. Akonix L7 Enforcer access policies can also be prioritized to optimize the processing of various protocols and IP addresses.
  • Detailed reports identifying IM and P2P usage patterns throughout the network. Akonix L7 Enforcer maps each IP address to the corresponding network user via actionable and readable reports showing who is trying to access the unsanctioned application. Reports can be organized by protocol, user name, or by IP address.
  • A unique, dynamic update capability that ensures protocol signatures are current. Changes to existing protocols and the addition of new application protocols are regularly downloaded—without requiring system downtime or rebooting.
  • Seamless integration with Akonix L7 Enterprise, the industry leading IM management gateway, to provide end-to end coverage for blocking all unauthorized IM and P2P access while delivering management, security, and logging for all authorized IM access.

Features and Functions

  • Protect against unauthorized IM and P2P access
  • Blocks unauthorized access to AOL, Yahoo!, MSN, Google Talk and ICQ - including browser-based clients
  • Blocks unauthorized access to eDonkey, IRC, BitTorrent, Kazaa, iMesh, Grokster, Morpheus, LimeWire, and other P2P applications
  • Blocks unauthorized access to Skype and other common VoIP applications
  • Prioritizes policies through hierarchical access control lists
  • Patent-pending signature recognition identifies and blocks IM and P2P at protocol level; effective regardless of ports used, evasive measures like tunneling or masquerading, and port 80 http tunneling

Easy Configuration and Administration

  • Dynamically updates P2P and IM protocol adapters
  • Prioritizes access policies by defining policy hierarchy to optimize Akonix L7 Enforcer performance
  • Deploys in minutes without touching employee desktops
  • Flexible policy settingsspecify which action to take for each protocol encountered
  • Multiple action options
  • Stealth observation allows all users to access IM and P2P, but log activity for later analysis
  • Selectively block certain departments or users for all or some IM and P2P applications
  • Deploy Akonix L7 Enforcer alongside Akonix L7 Enterprise to effectively block all IM and P2P except the IM users that are authorized
  • Exception lists of IP addresses or ranges to exclude from default policy
  • Multi-subnet support through a single Akonix L7 Enforcer to handle multiple network segments
  • Flexible logging intervals to define logging periods for managing logs generated by highly active protocols
  • VLAN support through a single Akonix L7 Enforcer
  • Passively monitors network traffic with no impact on network performance or reliability

Flexible Reporting

  • Logs and reports on IM and P2P activity by user and protocol
  • Schedule reports to be run and emailed automatically
  • Multiple standard reports available
  • Custom reports available meet unique requirements
  • Multiple report formats including HTML, PDF, Crystal, CVS, TSV and text

Dynamic Protocol Updates

  • Update existing protocols and add new ones through regularly scheduled dynamic updates
  • Install new protocols and updates without any system downtime or reboot