Glasswall Documentation
website·Indexed 30 days ago
https://glasswallpublicdocs.z6.web.core.windows.net/Documentation for Glasswall CDR (Content Disarm and Reconstruction) technology, featuring the four-step process of Inspect, Rebuild, Clean, and Deliver. Includes technical guides for Glasswall Halo, including installation via Oracle Kubernetes Engine (OKE), support for NITF and NSIF file analysis, archive file protection, and API configurations for Synchronous and Policy Management services.
What's inside Glasswall
- Glasswall Conform is a command-line tool used to preprocess PDF documents by extracting and reconstructing visual content. Its primary purpose is to ensure documents meet PDF standards so they can be further processed by the Glasswall Embedded Engine for full Content Disarm and Reconstruction (CDR) protection.
Overview of Glasswall Halo ICAP integration
Glasswall Halo uses the Internet Content Adaptation Protocol (ICAP) to offload file sanitization (CDR) to dedicated servers. The Halo ICAP server acts as an intermediary between ICAP clients (such as proxy servers, firewalls, or gateways) and the Glasswall Halo service. It supports two types of ICAP requests: Response modifications (downloads from a server) and Request modifications (uploads to a server).Overview of Glasswall Halo with Spectra Intelligence and CDR
Glasswall Halo integrates Spectra Intelligence (powered by ReversingLabs) with Content Disarm and Reconstruction (CDR) to provide Zero Trust threat removal. This combination offers:
- Advanced threat intelligence based on the evaluation of over 40 billion files.
- Support for over 4,800 file types for real-time risk assessment and breach prevention.
- Automated file handling where admins can use malware detection and classification to automatically approve safe files and block suspicious ones.
Overview of Glasswall Halo file protection
Glasswall Halo is a cloud-native file protection service built on a Kubernetes architecture for infinite scalability. It is designed for security teams and developers, featuring an OpenAPI specification compliant design for web services and open-source connectors to facilitate both on-premises and cloud integrations.Overview of Glasswall Embedded Engine CDR capabilities
The Glasswall Embedded Engine provides Content Disarm and Reconstruction (CDR) via an SDK and API. Unlike traditional security tools that look for malicious content, Glasswall treats all files as untrusted and validates, rebuilds, and cleans them against the manufacturer's 'known-good' specification. The engine allows security teams to define security policies based on their organization's risk appetite.Overview of Glasswall Halo Portal capabilities
The Halo portal serves as the centralized management hub for Glasswall’s Content Disarm and Reconstruction (CDR) technology. It provides a unified interface for:
- Monitoring file processing, detected threats, and system usage via reporting.
- Configuring granular protection policies to align with organizational risk appetite.
- Managing file cleaning, ICAP integration, XML validation, and API configurations.
Overview of Glasswall Halo Content Disarm and Reconstruction (CDR)
Glasswall Halo uses Content Disarm and Reconstruction (CDR) technology to process files by removing or neutralizing potentially malicious content. The system cleans and rebuilds files to align with 'known good' industry specifications, producing a sanitized version of the file that can be safely accessed by users or information systems without security risks.Overview of Glasswall Synchronous API capabilities
The Glasswall Synchronous API provides Content Disarm and Reconstruction (CDR) technology to secure files. Key capabilities include:
- Complete File Analysis: Detects non-conformance with industry specifications.
- True File Type Detection: Identifies file types based on actual content, ignoring misleading file extensions or magic numbers.
- File Protection: Removes threats and restores files to known-good specifications.
- Policy Customization: Offers content management options to align with an organization's specific security risk appetite.
Overview of Glasswall Halo ICAP Server Integration
The Glasswall ICAP server acts as a mediator between ICAP clients (such as proxy servers, firewalls, or gateways) and the Glasswall Halo service. When a file passes through an ICAP client, it is sent to Glasswall Halo for sanitization via the Internet Content Adaptation Protocol (ICAP) before being returned to the client. This implements a Zero Trust approach to file security by removing potential threats (CDR) rather than attempting to detect them.Overview of Glasswall Halo CDR Technology
Glasswall Halo uses Content Disarm & Reconstruction (CDR) to remove threats from unknown files in less than a second without compromising content. Unlike traditional antivirus or sandboxing, which may miss zero-day threats, CDR inspects a file's digital DNA, cleans risky content based on policy, rebuilds the file to a 'known good' standard, and delivers a visually identical safe file.Implement CDR for file security and threat defense
Content Disarm and Reconstruction (CDR) is used to mitigate security risks associated with file transfers. Primary use cases include:
- Securing file uploads or downloads originating from unknown sources.
- Removing malware risks from files before they reach the end user or system.
- Defending against Zero-Day threats by neutralizing active content within files.
Verify Embedded Engine support for Windows operating systems
The Embedded Engine supports the following Windows operating systems for x86-64 architecture only (ARM64 is not supported):
- Windows 11
- Windows 10
- Windows Server 2022
- Windows Server 2019
- Windows Server 2018
- Windows Server 2016