Essential
The Essential Security Edition provides comprehensive, proactive protection during internet browsing. It safeguards companies' mobile connections and business sites against threats from the Internet. Compared to legacy security solutions, a key advantage of beem is that it offers "security to-go," making protection site-independent and, therefore, ubiquitous. The beem Essential Security Edition offers high-end security features for optimal internet browsing protection.
In my Swisscom Business, customers can choose between four progressively advanced security levels to ensure safe Internet browsing. These security levels follow standardized security policies across all functionalities included in the Essential Security Edition, as defined by Swisscom. Once activated, the policies are applied company-wide to all connected lines and sites.
Security Levels
This security level includes the inspection of unencrypted data traffic, while encrypted data traffic is only superficially checked due to the lack of decryption. URL filtering, IP filtering, DNS filtering, IPS, and endpoint IP address cloaking are part of this security level.
This security level additionally disables services and internet protocols that potentially negatively impact the security of corporate data. Some examples of blocked protocols are DNS encryption such as DoH, DoT, and others.
This security level includes everything from the previous level and is aimed at customers who want to benefit from Swisscom's security expertise and real-time information. The security policy focuses on actively blocking harmful content for a safer internet experience. Phishing and fraud websites are proactively detected and blocked. This is based on reputation levels and protocols.
This security level further enhances privacy protection while browsing by preventing tracking and data collection for advertising purposes through the implementation of a comprehensive Secure Web Gateway.
From the Security Level 2 onwards and when using the beem app, the transmitted data packets are additionally decrypted, and the user data is automatically examined for specific characteristics such as protocol violations, computer viruses, spam, and other unwanted content (Deep Packet Inspection). For this, the installation of a certificate on the end devices is necessary. The beem app guides the user through the installation of the certificate. The use of the beem app is also recommended because it secures and encrypts traffic not only on beemNet but also on all other networks (e.g., WLAN) in the same way.
Deep Packet Inspection and the beem App
Deep Packet Inspection: Starting from the Security Level 2 and when using the beem App, transmitted data packets are decrypted and automatically analyzed.
The inspection detects:- Protocol violations
- Computer viruses
- Spam
- Other unwanted content
Certificate Requirement: A certificate must be installed on end devices to enable Deep Packet Inspection. The installation is guided by the beem App.
Benefits of the beem App: The beem App is recommended because:
- It protects traffic not only on beemNet, but also on other networks (e.g., Wi-Fi).
- It also encrypts traffic to enhance data security.
Feature Availability
The following features are available in different variations depending on the security level selected by the customer in My Swisscom Business.
| Feature / Functionality | Available |
|---|---|
| Firewall as a Service (FWaaS) & Secure Web Gateway (SWG) | |
| Stateful Packet Inspection (SPI) | ✓ |
| Deep Packet Inspection (DPI) | ✓ |
| DNS Proxy & Security | ✓ |
| URL & IP Reputation | ✓ |
| TLS & SSL Proxy & Decryption | ✓ |
| Intrusion Detection System (IDS) | ✓ |
| Intrusion Prevention System (IPS) | ✓ |
| Malware & Antivirus Scanning | ✓ |
| Application Layer Gateway (ALG) & Application Control | ✓ |
| Access Network Integration | |
| Integration with beem Office via site licenses | ✓ |
| Integration with Swisscom mobile network via user licenses with mobile subscription | ✓ |
| Endpoint IP-Address Cloaking | |
| Source/User cloaking | ✓ |
| Unified Threat Management | |
| Antivirus (AV) | ✓ |
| E-Mail Security for SMTP, IMAP, MAPI, POP3 | ✓ |
| IN-2-OUT Traffic | |
| Internet access via beemNet | ✓ |