Secure partner access to your internal servers

IBM Sterling Secure Proxy helps shield your trusted network by preventing direct connectivity between external partners and internal servers. It can secure your network and data exchanges at the network edge to enable trusted business-to-business transactions and managed file transfer (MFT) file exchanges. As a demilitarized zone (DMZ)-based proxy, Secure Proxy uses multifactor authentication, SSL session breaks, closing of inbound firewall holes, protocol inspection and other controls to ensure the security of your trusted zone.

Features

• Supported Incoming Protocols
• Supported Outbound Protocols
• Session Break at DMZ
• User-Specific/Dynamic Routing of Requests
• User ID and Password-Based Authentication
• REST APIs for SSP Config Manager
• CRL Checking
• User ID / IP Block listing / Allow listing
• Virus Scanning of Incoming Files
• HSM Support

Benefits

• **Data protection: **Provides firewall navigation best practices to help ensure perimeter security for enhanced protection of your data and trusted zone.
• **Full authentication services: **Offers multifactor authentication before connection to backend systems, for tighter controls and validation.
• **Advanced proxy features: **Includes proxy support and functions to improve security of edge-based file exchanges.
• **Dynamic routing: **Provides advanced routing to simplify infrastructure changes, saving time and reducing risk during migrations.
• **In-Flight Virus Scanning: **Provides support for ICAP supported Virus Scanning engines to ensure files are scanned for malwares before it lands on the secure zone.
• **Multifactor Authentication: **Offers support for SAML integration with external identity providers to enable Multi Authentication for external user logins.

Editions

• **Inbound Edition: **This edition provides reverse proxy functionality that is concurrent with Sterling Secure Proxy for routing and securing inbound traffic. For Sterling Connect: Direct users, the Inbound Edition also continues to support outbound file transfers using the Connect: Direct protocol via Secure Proxy. Current clients of Sterling Secure Proxy are not impacted by renaming to Sterling Secure Proxy Inbound Edition.
• **Outbound Edition: **This edition provides forward proxy functionality that supports routing and securing of outbound traffic. Only outbound file transfers using the SFTP protocol are supported. Current clients of Sterling Secure Proxy can purchase this edition to gain access to forward proxy functionality.
• **Premium Edition: **This edition has all the features of Sterling Secure Proxy Inbound Edition and Sterling Secure Proxy Outbound Edition. Clients with entitlement to either the Inbound or Outbound edition can trade up to the Premium edition and thereby obtain functionality that supports routing and securing of both inbound and outbound traffic.