SaaS Based Protections Offer Welcome Relief for Enterprises Scrambling to Deploy Dozens of Patches

SUNNYVALE, Calif., Oct. 14 /PRNewswire/ -- Zscaler, Inc., the market leader in cloud-delivered multi-tenant Security as a Service (SaaS), today announced that it has deployed protections to protect customers against web based threats included in Microsoft's largest ever monthly patch cycle. With Zscaler's cloud-delivered security service, customers were immediately and transparently protected from numerous vulnerabilities, some of which are critical and are being actively exploited. Zscaler's protections are in-line and as such, do not require customers to take any action on their own. This comes as welcome news to enterprises scrambling to deploy patches to address the flood of vulnerabilities.

On Tuesday, Microsoft released its largest monthly patch cycle to date, covering a total of 34 vulnerabilities in 13 advisories. Such patch cycles create a daunting task for enterprises, which must quickly deploy patches to individual systems before exploits emerge, allowing attackers to compromise machines. This challenge is made even more difficult for companies with a mobile workforce where laptop computers may not be online at any given time to permit patches to be pushed to road warriors. As a SaaS service provider, Zscaler has been able to deploy in-line protections that block threats before they ever reach vulnerable systems. Such protections apply to both end-user systems on the enterprise network and laptops out in the field.

"Thanks to our involvement in the Microsoft MAPPs program, we were able to gain early insight into this month's patch cycle and ensure that protections were available as soon as the vulnerabilities became public," said Michael Sutton, vice president security research, Zscaler. "The Microsoft Active Protections Program (MAPPs), ensures that Microsoft's trusted security partners receive details of vulnerabilities ahead of public release in order to build appropriate protections."

Zscaler has deployed protections for the following vulnerabilities included in the Microsoft Security Bulletins for October 2009:

• MS09-054
  • CVE-2009-2530 - Cumulative Security Update for Internet Explorer (974455)
• MS09-055
  • CVE-2009-2493 - Cumulative Security Update for Internet Explorer (974455)
• MS09-057
  • CVE-2009-2507 - Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)
• MS09-060
  • CVE-2009-0901 - Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)
  • CVE-2009-2493 - Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)
    

About Zscaler

Through a multi-tenant, globally-deployed infrastructure, Zscaler enforces business policy, mitigates risk, and provides twice the functionality at a fraction of the cost of current solutions. It enables organizations to provide the right access to the right users, from any place and on any device--while empowering the end-user with a rich Internet experience. For more information, visit us at www.zscaler.com

Zscaler(TM) and the Zscaler Logo are trademarks of Zscaler, Inc. in the United States. All other trademarks, trade names or service marks used or mentioned herein belong to their respective owners.

    Press Contact:
    Paula Dunne, Contos Dunne Communications
    Office: +1-408-776-1400, Mobile: +1-408-893-8750
    paula@contosdunne.com

SOURCE Zscaler

Back to top

RELATED LINKS
http://www.zscaler.com