Search: Advanced
Search
 
   
Related Articles
 
More Information
 
 

Catseye™

 
 

Technology

  • The Catseye™ Publishing Technology allows publishing to Internet from Private Network (LAN)
  • The technology requires no public IP Addresses nor open firewalls. The Catseye™ products sit behind routers, on private networks (LANs), and are invisible to the prying eyes of hackers. Catseye™ brings network security to your enterprise like no other web publishing product
  • Incoming requests are intercepted by Catseye™ Server and delivered to the Catseye Agent™ via a secure communication channel that is originated by the Catseye™ Agent
Publishing Using Catseye™ Technology

Publishing Using Catseye Technology

  • The responder (The Catseye™ Agent) does not listen to external requests. This means that the responder logic is protected from alteration and replacement, because the incoming request is always serviced by the pre programmed responder itself.

  • The mechanism allows the responder computer to be kept in the private network (a network that has no public IP addresses). Hence data sources (on the private network) that have open sockets (e.g. SQL Server) will continue to be safeguarded.

  • The Catseye™ Agent is designed to run on a hardened operating system environment and hence the computer system it is running on will not be susceptible to operating system vulnerabilities.

  • The Catseye™ Agent is able to deliver both HTML and XML. This not only allows Browser Clients to access it, but Web Service Clients as well.

  • The Catseye™ Agent uses standard outgoing communication mechanisms to communicate with the Catseye™ Server. Hence network security is not compromised.

The Catseye™SPN design, which was reviewed by CygnaCom, provides additional security to web server applications that access private backend databases. It allows removal of the database responder logic to a more secure location behind a router and provides protection of that logic from external access and abuse.

The outbound-only connectivity it requires is consistent with accepted firewall configuration guidelines and superior to alternatives that require inbound access to the backend systems.

The custom responder interface presented to the external web server is designed to provide a significant additional barrier to compromise of the responder and abuse of the database access methods via the public network.

CygnaCom Testing and Security labs

  Back to top