Essential

The Essential edition provides fundamental cyber protection for businesses. It protects users as well as company sites through beemNet against common internet threats and enables secure internet access. The Essential edition delivers up-to-date daily protection against malicious websites and malware, enhances privacy through targeted anonymisation, and includes the beem app for extended protection in third-party networks – all without the need for complex configurations.

Security Levels

In the My Swisscom Business portal, administrators can select from four Security Levels with increasing levels of protection and stricter policies, depending on their organisation’s needs. Each level includes the features of the previous one while adding further security measures. These Security Levels are based on standardised Swisscom policies and, once activated, are enforced across all connected company devices and sites.

Note: Deep Packet Inspection (available from Security Level 2 onward) only works on devices with the beem app installed, as it requires the Root Certificate Authority provided by the app. The beem app is generally recommended because it secures and encrypts traffic not only on beemNet but also on other networks (e.g., public Wi-Fi).

Security Level 1

This level provides basic security for internet access, including Stateful Packet Inspection (SPI). Only unencrypted data is inspected, encrypted data passes through without verification. Protected client devices have their real IP addresses concealed, hiding their identity and location from websites, which only see a shared public IP address. Device security is enhanced by offering protection against targeted attacks such as Denial-of-Service (DoS). Web surfing protection is enhanced by IP and URL reputation checks and URL filtering. Access to known malicious websites is blocked by a Swisscom managed blacklist.

Active features:

• URL Filtering
• IP Filtering
• DNS Filtering
• IPS
• SPI

Security Level 2

This level provides additional security measures. Onward from this level, reputation-based Deep Packet Inspection (DPI) is supported on client devices running the beem app. Security Level 2 enforces DPI for high-risk and potentially suspicious categories. Transmitted data packets are decrypted and user data is automatically examined for specific characteristics (e.g., protocol violations, computer viruses, spam, and other unwanted content). Traffic for certified safe apps (included on a whitelist maintained by Swisscom) will not be inspected. URL filtering through a managed blacklist and whitelist is included. Malware protection is also provided.

Active features:

• URL Filtering
• IP Filtering
• DNS Filtering
• IPS
• SPI
• DPI (with beem app)
• AV & Malware

Security Level 3

This level adds real-time insights and proactive measures to block harmful content. User privacy protection is enhanced by promoting user anonymisation during internet usage. As a result, certain websites and internet services might become inaccessible. Access to unknown or unclassified content deemed suspicious or harmful (based on reputation levels and protocols) is prevented. DPI is enforced on reputation based high-risk, moderate-risk and suspicious categories. The list of phishing and scamming websites (e.g., fraudulent copies of TWINT or other banking platforms) is continuously updated.

Active features:

• Enhanced URL Filtering
• Enhanced IP Filtering
• DNS Filtering
• IPS
• SPI
• DPI (with beem app)
• AV & Malware

Security Level 4

This level enhances user anonymisation, which may restrict access to some legitimate, non-malicious websites and services to protect both the user and the company. Swisscom recommends this setting as long as it does not disable any business-critical internet services. It also blocks advertising and associated trackers. DPI happens on reputation based high-risk, moderate-risk, suspicious and undefined categories. Strict URL filtering is introduced to block unwanted content and enhance security. Only critical services are accessible, while non-essential or potentially risky websites are blocked.

Active features:

• Strict URL Filtering
• Enhanced IP Filtering
• DNS Filtering
• IPS
• SPI
• DPI (with beem app)
• AV & Malware
• Advertisement Blocking
• Tracker Blocking