Essential

The Essential Security Edition provides comprehensive, proactive protection during internet browsing. It safeguards companies' mobile connections and business locations against threats from the Internet. Compared to legacy security solutions, a key advantage of beem is that it offers "security to-go," making protection location-independent and, therefore, ubiquitous. The beem Essential Security Edition offers high-end security features for optimal internet browsing protection.

In my Swisscom Business, customers can choose between four progressively advanced security levels to ensure safe Internet browsing. These security levels follow standardized security policies across all functionalities included in the Essential Security Edition, as defined by Swisscom. Once activated, the policies are applied company-wide to all connected lines and locations.

Security Levels

• Security Level 1: Inspect: This security level includes the inspection of unencrypted data traffic, while encrypted data traffic is only superficially checked due to the lack of decryption. URL filtering, IP filtering, DNS filtering, IPS, and endpoint IP address cloaking are part of this security level.

• Security Level 2: Default: This security level additionally disables services and internet protocols that potentially negatively impact the security of corporate data. Some examples of blocked protocols are DNS encryption such as DoH, DoT, and others.

• Security Level 3: Dynamic: This security level includes everything from the previous level and is aimed at customers who want to benefit from Swisscom's security expertise and real-time information. The security policy focuses on actively blocking harmful content for a safer internet experience. Phishing and fraud websites are proactively detected and blocked. This is based on reputation levels and protocols.

• Security Level 4: Strict: This security level further enhances privacy protection while browsing by preventing tracking and data collection for advertising purposes through the implementation of a comprehensive Secure Web Gateway.

From the default security level and when using the beem app, the transmitted data packets are additionally decrypted, and the user data is automatically examined for specific characteristics such as protocol violations, computer viruses, spam, and other unwanted content (Deep Packet Inspection). For this, the installation of a certificate on the end devices is necessary. The beem app guides the user through the installation of the certificate. The use of the beem app is also recommended because it secures and encrypts traffic not only on beemNet but also on all other networks (e.g., WLAN) in the same way.

Deep Packet Inspection and the beem App

• Deep Packet Inspection: Starting from the Default security level and when using the beem App, transmitted data packets are decrypted and automatically analyzed.
  The inspection detects:

  • Protocol violations
  • Computer viruses
  • Spam
  • Other unwanted content

• Certificate Requirement: A certificate must be installed on end devices to enable Deep Packet Inspection. The installation is guided by the beem App.

• Benefits of the beem App: The beem App is recommended because:

  • It protects traffic not only on beemNet, but also on other networks (e.g., Wi-Fi).
  • It also encrypts traffic to enhance data security.

Feature Availability

The following features are available in different variations depending on the security level selected by the customer in My Swisscom Business.

Feature / Functionality	Available
Firewall as a Service (FWaaS) & Secure Web Gateway (SWG)
Stateful Packet Inspection (SPI)	✓
Deep Packet Inspection (DPI)	✓
DNS Proxy & Security	✓
URL & IP Reputation	✓
TLS & SSL Proxy & Decryption	✓
Intrusion Detection System (IDS)	✓
Intrusion Prevention System (IPS)	✓
Malware & Antivirus Scanning	✓
Application Layer Gateway (ALG) & Application Control	✓
Access Network Integration
Integration with beem Office via site licenses	✓
Integration with Swisscom mobile network via user licenses with mobile subscription	✓
Endpoint IP-Address Cloaking
Source/User cloaking	✓
Unified Threat Management
Antivirus (AV)	✓
E-Mail Security for SMTP, IMAP, MAPI, POP3	✓
IN-2-OUT Traffic
Internet access via beemNet	✓