Byos

The Byos Secure Endpoint Edge is a small plug-and-play hardware edge device that provides the “first hop” protection when connecting to an unmanaged network (public or home Wi-Fi). It provides microsegmentation and route enforcement by replacing the endpoint’s native Wi-Fi, protecting across OSI layers 1-5 by becoming the gateway. This solution provides the connected endpoint with true isolation from the rest of the network, and fills the gap left by security software by being the ingress/egress point for all internet traffic and not being susceptible to bypass and stealth attacks originating inside the endpoint’s OS.

The Byos solution includes:

• Byos Secure Edge - The Byos Secure Endpoint Edge device performs all networking on behalf of the endpoint (performs NAT, has its own DHCP, encrypted DNS server, proprietary network security stack), thus replacing the endpoint’s native Wi-Fi.
• Byos Microsegment - The protected zone created by the Secure Endpoint Edge, which the endpoint sits inside, so that it remains invisible to fingerprinting, enumeration, or discovery attacks on the local network.
• Internet Traffic - The Secure Endpoint Edge routes clean TLS traffic to the internet, and can be routed to an organization’s existing cloud security solutions.
• Traditional Perimeter - The Byos Secure Endpoint Edge device is agentless as nothing needs to be installed on the endpoint and deploys easily without requiring changes to the local network configuration.
• Byos-leveraged IAM - Byos integrates with identity solutions so the Secure Endpoint Edge can act as an authorization signal - eg. “John Doe is using his Byos Secure Endpoint Edge, therefore he can access Github”.
• Secure Lobby Tunnel without Internet Access - Policies can be set by the Admin from the Byos Management Console to block internet access to/from the endpoint. However, this endpoint can still communicate to other Secure Endpoint Edge also connected to Secure Lobby.
• Secure Lobby Tunnel with Internet - Endpoints using a Secure Endpoint Edge can have all internet traffic routed through Secure Lobby, to a controlled exit node set by the Administrator, so that no packet touches public servers before reaching the internet.
• Byos control plane traffic - Constant pull beacons from the Secure Endpoint Edge to the Byos Management Console for centralized command and control.