Deep-Secure Ltd - solutions for military, defence and intelligence security
Deep-Secure provides a range of security solutions, accredited to EAL4 standard, for highly sensitive military, defence and intelligence organisations. Products such as Bastion™, DeepSecure™ and DeepSecure Lite™ address the security needs of the world's most mission-critical messaging applications for clients such as the UK Ministry of Defence and NATO, providing network separation and boundary protection. In situations where networks carry sensitive information, organizations are faced with a wide range of threats and need to communicate in security-hardened environments. An electronic air gap with automated content inspection provides higher security than a conventional air gap with all the human factors involved, and allows messaging to be performed in real time. Further it is important that all critical mail should be content checked, archived and screened automatically for release against sensitivity, policy and originator, validated by digital signature.
EAL4 evaluated solutions
Bastion™
Bastion provides EAL4 assured separation of networks operating at differing levels of trust. It can be considered as an application level firewall, which restricts the flow of information to material that strictly comprises a particular protocol (i.e. SMTP, SNMP, X.400 or X.500). This allows networks to be connected with confidence that no traffic can traverse the boundary between the networks other than that of the designated protocol. The Bastion™ product can also be configured to operate as a uni-directional device.
DeepSecure™
DeepSecure provides EAL4 assured network boundary protection, combining the capabilities of Bastion™ (above) with inspection of messages in a secure demilitarised zone (DMZ), according to prescribed policy. This protects the policy enforcement from subversion and also permits the inspection of encrypted emails without the risk of an eavesdropping attack.
Unevaluated solutions
DeepSecure Lite™
DeepSecure Lite™ is a Policy Enforcement and Content Checking Server for X.400 and SMTP messaging. It provides a rich selection of message security functionality and content policy options. DeepSecure Lite is based on the same policy server code as proven in the EAL4 evaluated DeepSecure solution and is designed for use in lower threat environments where the assured network separation of an Application-Level Firewall is not required or where a DMZ architecture is provided by other means.