WrappingBox, the award winning technology for secure remote working access
Key features and benefits
- Presents a company-workspace to users in the form of a familiar-looking desktop with applications the user already knows from his local computer
- Applications that are launched from the protected workspace are automatically wrapped; applications have no access to the local file system, the registry, the clipboard and the network. Limited access can be defined following any company policy.
- Local disk drives are available to the applications. Files cannot be opened or copied to the WrappingBox. Data that is written to a local drive are stored inside the WrappingBox. All information that is (temporarily) stored inside the WrappingBox is transparently encrypted. This data cannot be accessed from outside the WrappingBox and valuable company information cannot be leaked
- Connects to the company SecureGateway if the user is online. Users can easily download and upload company documents to and from the WrappingBox for temporary local storage and/or editing.
- When closing the WrappingBox, policies define what the user can do with the company data. Documents can be uploaded to a company file server, temporarily stored inside the WrappingBox for offline use, or deleted
- While online, the user can use the embedded SecureBrowser Pro to access internal company web resources. For more details please see chapter ‘Embedded Options’.
- Built-in support for two-factor authentication using user certificates or smartcards.
- Price winning and patented technology prevents the data loss through COM (Component Object Model)
* patent nr. 6104447 - Application with a small footprint that can be installed and easily removed from a users’ pc. Clean install, does not interfere with the local operating system or applications
- Pre-registration of the most widely used applications such as Microsoft® Office and Adobe® Reader®
- Saves on implementing and managing a Server Based Computing platform or Virtual Desktop Infrastructure and any additional licenses that may be required
Additional embedded functionality
Soliton SecureBrowser
WrappingBox comes with an internal Soliton SecureBrowser implementation, with the following additional benefits:
Sandboxed secure access to internal company web resources, such as Intranet sites, or to the Internet using company access policies. All cached data is automatically deleted after use
Uses the internal DNS-servers for DNS name resolving without the need for a VPN
Embedded password manager for Single Sign-On authentication
Central management portal
Comprehensive usage logging
A stand-alone Soliton SecureBrowser can be used on macOS, iOS and Android platforms to access documents and company resources.
For more information download the product sheet
Soliton SecureGateway
WrappingBox is always used in conjunction with Soliton SecureGateway to securely connect to company resources.
The SecureGateway prevents the web servers from having to be Internet-facing. Data in transit between the gateway and the remote client is always encrypted and does not require certificates on each web server. Provides DNS name resolving on the internal network to offer full functionality to the SecureBrowser.
Soliton SecureFile
WrappingBox requires Soliton SecureFile to securely transfer files to and from company servers.
It does this by creating a web-based view on internal file repositories, like a Windows-server. SecureFile also enables a private file repository for each user.
Files stored in this area are automatically available on all the users’ devices for quick access or reference, without the need for an external cloud service. Using SecureFile, administrators remain in full control over the documents. SecureFile logs all access to files and records which user has downloaded what files and at what time. It can integrate the logging with existing logging and monitoring systems.
Integrating SecureFile does not require any changes to the internal servers, the access rights of the target server will be effective.
WrappingBox and SecureBrowser Infrastructure
SecureBrowser: available on Android, iOS, macOS and Windows
WrappingBox: includes SecureBrowser
Our general approach in remote access security
All Soliton’s remote access solutions are designed based on the same principles
- Mutual authentication between client and gateway creating a secure connection
- Gateway protects the servers and the network from cyber-attacks and from unauthorized access
- Gateway separates the client from the network, the remote device is never part of the network
- Gateway exchanges information with the network and enables secure access to the network resources
- Remote access client can be installed by end-user, no special rights required for PCs or Macs
- User access is based on permission rules or Active Directory group membership
- WrappingBox is a Microsoft® Windows® application with a very small footprint
- Can be easily installed and removed
- Does not interfere with the local installation of applications, just allows them to run in wrapped mode using Microsoft® Component Object Model (COM)
- Embedded Soliton SecureBrowser Pro
| SecureGateway | |
|---|---|
| Supporting virtual platform | VMware ESXi 6.7 / 6.5 / 6.0 |
| VMware virtual machine version | 10 |
| Virtual machine image | OVA |
| Number of CPU | 4 |
| Memory size | 8 GB |
| HDD 1 | 4 GB |
| Network adapter | 4 |
| SecureFile | |
|---|---|
| Supporting virtual platform | VMware ESXi 6.7 / 6.5 / 6.0 |
| VMware virtual machine version | 10 |
| Virtual machine image | OVA |
| Number of CPU | 4 |
| Memory size | 8 GB |
| HDD 1 | 500 GB |
| Network adapter | 4 |
Soliton NetAttest EPS
WrappingBox can use a client certificate that is installed on the user’s device as a second authentication factor, when this is a mandatory requirement from the Secure Gateway. Soliton’s NetAttest EPS supports organizations with the creation and safe distribution of client certificates to user devices. An integration with the SolitonNetAttest EPS-series adds an extra layer of security in the form of strong user- and/or device authentication. It provides the possibility to automatically populate the user’s logon name from the digital certificate preventing the user from using another identity while logging on.
For more information on NetAttest EPS download the product sheet.
