Plus

beem Plus extends on the previous editions with advanced access control, higher service bandwidth, site protection for inbound services—while keeping policy management unified on the beem platform. It includes SWG and NGFWaaS, ZTNA for private and SaaS apps, inline CASB, and Remote Browser Isolation.

INFO

Plus includes all capabilities of beem Basic and beem Essential.

Feature highlights

• Unified Internet & App Security: Secure Web Gateway and NGFWaaS inline for all traffic; ZTNA policies for private/SaaS apps; inline CASB for selected SaaS; Remote Browser Isolation for risky web apps.
• Inbound (“out-2-in”) and outbound (“in-2-out”) site protection with Two-Way Protection on supported CPE. Includes encrypted connection to the beem platform, policy enforcement for ingress and egress, and safe termination of incoming sessions.
• Network segmentation at the site for Two-Way Protection (pre-defined VLANs mapped to physical ports) enabling ZTNA Everywhere, Internet-facing services, and Resource Protection for on-prem workloads.
• Swisscom Business Account Passkeys for passwordless, phishing-resistant sign-in up to NIST AAL3.
• Identity & Access Management with optional SSO and federation with Microsoft Entra ID.
• Collaboration Users with concurrent-session licensing.
• Analytics & Reporting processes data to create near real-time graphs and tables on Concerto, and generates reports on usage patterns, trends, security events, and alerts.

INFO

The list above includes only a selection of available features. For a full overview of the features included in the Plus Security Edition, as well as a detailed comparison of all Concerto settings across the Basic, Plus, and Premium Security Editions, please refer to the Concerto Features Matrix.

Security model

• Single-pass enforcement on the beem platform minimizes latency by decrypting → inspecting → re-encrypting traffic exactly once.
• Endpoint IP-Address Cloaking: client and site IPs are hidden behind shared public IPs; the internet only sees generic addresses.

Site protection with Two-Way Protection

Use when you host public services or have on-prem apps to protect.

What it adds:

• Encrypted CPE↔beem platform tunnel.
• Egress & Ingress policy enforcement.
• Ingress termination on the platform.