{"Id":481,"Title":"SphereShield Security and Compliance","Slug":"agat-software-sphereshield-security-and-compliance","Rank":0,"ShortTitle":"SphereShield Security and Compliance","ImageUrls":["https://partnersolutions.skypeforbusiness.com/content/mediamanager/12/61/1261FrontendLarge.png"],"Brand":{"Id":64,"Title":"Agat Software"},"Description":"\u003cspan\u003e\u003cspan\u003e\u003cspan\u003eSecure Skype for Business with DDoS \u0026amp; account lockout protection, device access control with MDM integration, ethical wall for federation, and more.\u003c/span\u003e\u003cbr /\u003e\u003cbr /\u003e\u003cbr /\u003e\u003cspan\u003eAGAT SphereShield protects Skype for Business, Exchange, and Active Directory\u0026nbsp;against security threats related to deployments publishing external access by adding the following capabilities:\u0026nbsp;\u003c/span\u003e\u003cbr /\u003e\u003cbr /\u003e\u003c/span\u003e\u003c/span\u003e\r\n\u003cul\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eNetwork protection\u0026nbsp;-\u0026nbsp;Protect against account lockout in DDoS attack. Device pre-authentication avoiding requests entering domain unless coming from a registered device \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eTwo Factor Authentication\u0026nbsp;- TFA \u0026nbsp;by requiring the device as the second factor in addition to credentials to Skype for Business \u0026amp; Exchange (EWS).\u0026nbsp;Optionally require 3 factor based on VPN access/certificate. \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eDevice Access Control\u0026nbsp;- Restrict the usage of Lync \u0026amp; Exchange only to registered devices. Several enrollment workflows, settings and web APIs are available to control the devices \u0026nbsp;\u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eMDM integration -\u0026nbsp;\u0026nbsp;Limit usage of Skype for Business\u0026nbsp;to devices with MDM\u0026nbsp;control \u0026amp; block access from devices that have become out of compliance or removed MDM control \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eActive Directory credentials protection- Avoid using and storing AD credentials on device by defining dedicated Lync credentials or using\u0026nbsp;RSA tokens. \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eEthical wall-\u0026nbsp;Solves ethical and compliance regulations, security and data protection issues by applying policies based on specific users , groups and domains/companies\u0026nbsp;controlling activities such as \u0026nbsp;IM, file transfer, meeting, audio, video.\u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eSkype application firewall\u0026nbsp;- The firewall handles security threats related to guest and anonymous requests sent to the corporate network. The firewall performs request rewrite (session termination),\u0026nbsp;protocol level sanitization (inspect for\u0026nbsp;malicious\u0026nbsp;code) and\u0026nbsp;application level inspection (validate content such as meeting ID and\u0026nbsp;stricture\u0026nbsp;or request). \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003eDLP Engine\u0026nbsp;- Apply\u0026nbsp;content rules policies based on group membership with incident actions of block, mask or notify. Also support commercial DLP integration with Symantec, ForcePoint (Websense), GTB and other vendors. \u0026nbsp;\u003c/span\u003e\u003c/li\u003e\r\n\u003cli\u003e\u003cspan style=\"font-size: 10pt;\"\u003e\u0026middot;No password authentication- Allow sign in without using password while trusting MDM identity.\u003c/span\u003e\u003c/li\u003e\r\n\u003c/ul\u003e","ShortDescription":"Secure Skype for Business with DDoS \u0026amp; account lockout protection, device access control with MDM...","VendorUrl":"http://sphereshield.com/","QualificationDate":"\/Date(1481691600000)\/","ShowCompareCheckBox":false,"Category":{"Id":8,"Title":"Applications","Slug":"applications","ProductCount":55,"OrderIndex":800,"Description":"\u003cspan\u003eFind applications that extend the Skype for Business experience. For categories such as Contact Center, Attendant Console, Call Recording and Compliance, we offer additional testing so customers may be able to get the added peace of mind when deploying these solutions with Skype for Business. Those successfully tested applications are designated below as Certified for Skype for Business. Partners looking to certify their Contact Center, Attendant Console, Call Recording and Compliance apps can find more details\u0026nbsp;\u003c/span\u003e\u003cspan style=\"text-decoration: underline;\"\u003e\u003ca href=\"https://partnersolutions.skypeforbusiness.com/certified\" target=\"_blank\" interactiontype=\"1\" ms=\"\"\u003ehere.\u003c/a\u003e\u003c/span\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/12/54/1254Original.png","IsComingSoon":false},"Categories":[{"Id":1,"Title":"IP Phones","Slug":"ip-phones","ProductCount":29,"OrderIndex":200,"Description":"\u003cp\u003eMicrosoft plans to test and certify IP phones for Skype for Business through the Skype for Business Certification Program. This reflects an evolution from the previous basic interop compatibility to a higher quality bar, including metrics targeting higher reliability. Phone vendors are actively working to meet this higher bar and will be qualifying against the new requirements starting the end of this calendar year.\u003c/p\u003e\r\n\u003cp\u003eIn the meantime Skype for Business supports backwards compatibility with all of our Lync qualified IP phones. Find more technical\u0026nbsp;resources and updates to our IP Phone category on \u003ca href=\"https://technet.microsoft.com/en-us/office/dn947482\" target=\"_blank\"\u003eTechNet\u003c/a\u003e.\u003c/p\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/04/50/0450Original.png","IsComingSoon":false},{"Id":2,"Title":"Personal Peripherals \u0026 PCs","Slug":"personal-peripherals-pcs","ProductCount":284,"OrderIndex":300,"Description":"\u003cp\u003eThe Skype for Business Certification program ensures that USB peripherals and PCs\u0026nbsp;offer rich audio and/or video quality and supporting features that provide both a great end user and admin experience.\u003c/p\u003e\r\n\u003cp\u003eAll of these specifications apply equally for Lync 2013 as they do for Skype for Business, hence all USB peripherals and PCs\u0026nbsp;that are qualified for Lync 2013 are also Certified for Skype for Business.\u003c/p\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/04/53/0453Original.png","IsComingSoon":false},{"Id":6,"Title":"Meeting Room Accessories","Slug":"meeting-peripherals","ProductCount":16,"OrderIndex":400,"Description":"\u003cp\u003eThe Skype for Business Certification program\u0026nbsp;tests\u0026nbsp;group peripherals to offer rich audio and/or video quality, plug \u0026amp; play features with the Skype for Business client, and\u0026nbsp;other features that provide both a great end user and admin experience.\u003c/p\u003e\r\n\u003cp\u003eAll group peripherals that were qualified on Lync are also considered\u0026nbsp;Certified for Skype for Business.\u003c/p\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/04/49/0449Original.png","IsComingSoon":false},{"Id":4,"Title":"Meeting Room Systems","Slug":"meeting-room-systems","ProductCount":24,"OrderIndex":500,"Description":"Microsoft tests enterprise grade meeting room systems to offer a high-quality audio and video experience with Skype for Business.\u0026nbsp;\u003cbr /\u003e\u003cbr /\u003e Lync Optimized meeting room solutions will be supported on Skype for Business. Find more details on \u003ca href=\"https://technet.microsoft.com/en-us/office/dn947482\" target=\"_blank\"\u003eTechNet\u003c/a\u003e. \u003cbr /\u003e\u003cbr /\u003eIn addition Lync qualified third-party video equipment providers have the option to support their devices working with Skype for Business. Please reach out to the vendors for more information.","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/04/51/0451Original.png","IsComingSoon":false},{"Id":5,"Title":"Networking \u0026 Hardware Infrastructure","Slug":"networking-hardware-infrastructure","ProductCount":53,"OrderIndex":600,"Description":"\u003cp\u003eThe Skype for Business Certification Program for SIP/PSTN Gateways, Video Gateways, IP-PBXs, SBAs, SBCs, WiFi, SDN, Load Balancers/Reverse Proxy, E911, ACP\u0026nbsp;and SIP Trunking Services ensures that customers have seamless experiences with setup, support, and use of qualified telephony infrastructure\u0026nbsp;and services with Skype for Business.\u003c/p\u003e\r\n\u003cp\u003eOnly products that meet the rigorous testing requirements and conform to the specifications and test plans will receive either the \u0027Certified for Skype for Business\u0027 or \u0027Works with Skype for Business\u0027 designation.\u0026nbsp;\u003cbr /\u003e\u003cbr /\u003ePlease note that\u0026nbsp;there may be a gap between the\u0026nbsp;general availability of Skype for Business and certification, specifically in the categories of SIP/PSTN Gateways, IP-PBXs, SBAs, SBCs, and\u0026nbsp;Load Balancers/Reverse Proxy solutions.\u0026nbsp;Please check \u003ca title=\"TechNet\" href=\"https://technet.microsoft.com/en-us/office/dn947481.aspx\" target=\"_blank\"\u003eTechNet\u003c/a\u003e for more information and detail on what and when solutions will obtain the new Skype for Business designations.\u003c/p\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/04/52/0452Original.png","IsComingSoon":false},{"Id":7,"Title":"IT Pro Tools","Slug":"it-pro","ProductCount":12,"OrderIndex":700,"Description":"Extending the reach of the built-in management and monitoring capabilities of Skype for Business Server, these tools are developed and certified to help customers successfully plan, deploy and operate a Skype for Business communication environment across voice, video and conferencing workloads.\r\n\u003cp\u003e\u003ca href=\"http://www.ucstrategies.com/white-papers/itpro-tools-in-skype-for-business-to-ensure-a-stellar-experience.aspx\" target=\"_blank\"\u003eRead a report\u003c/a\u003e on how these tools can help IT administrators deliver and maintain a high quality communications experience.\u003c/p\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/07/25/0725Original.png","IsComingSoon":false},{"Id":8,"Title":"Applications","Slug":"applications","ProductCount":55,"OrderIndex":800,"Description":"\u003cspan\u003eFind applications that extend the Skype for Business experience. For categories such as Contact Center, Attendant Console, Call Recording and Compliance, we offer additional testing so customers may be able to get the added peace of mind when deploying these solutions with Skype for Business. Those successfully tested applications are designated below as Certified for Skype for Business. Partners looking to certify their Contact Center, Attendant Console, Call Recording and Compliance apps can find more details\u0026nbsp;\u003c/span\u003e\u003cspan style=\"text-decoration: underline;\"\u003e\u003ca href=\"https://partnersolutions.skypeforbusiness.com/certified\" target=\"_blank\" interactiontype=\"1\" ms=\"\"\u003ehere.\u003c/a\u003e\u003c/span\u003e","ImageUrl":"https://partnersolutions.skypeforbusiness.com/content/mediamanager/12/54/1254Original.png","IsComingSoon":false}],"CategoryIds":[8],"Specifications":[{"Id":4,"Title":"Version Support","OrderIndex":100,"IsGroupSeperator":false,"Value":[{"Id":"162","Value":"Skype for Business Server 2015"}]},{"Id":118,"Title":"Certified As","OrderIndex":200,"IsGroupSeperator":false,"Value":[{"Id":"284","Value":"Compliance"}]},{"Id":2,"Title":"Version Tested","OrderIndex":400,"IsGroupSeperator":false,"Value":[{"Id":"-1","Value":"SphereShield Security \u0026 Compliance Version 3.4"}]},{"Id":3,"Title":"Qualified Date","OrderIndex":400,"IsGroupSeperator":false,"Value":[{"Id":"-1","Value":"12/14/2016"}]}]}

SphereShield Security and Compliance

Secure Skype for Business with DDoS & account lockout protection, device access control with MDM integration, ethical wall for federation, and more.


AGAT SphereShield protects Skype for Business, Exchange, and Active Directory against security threats related to deployments publishing external access by adding the following capabilities: 

  • Network protection - Protect against account lockout in DDoS attack. Device pre-authentication avoiding requests entering domain unless coming from a registered device  
  • Two Factor Authentication - TFA  by requiring the device as the second factor in addition to credentials to Skype for Business & Exchange (EWS). Optionally require 3 factor based on VPN access/certificate.  
  • Device Access Control - Restrict the usage of Lync & Exchange only to registered devices. Several enrollment workflows, settings and web APIs are available to control the devices   
  • MDM integration -  Limit usage of Skype for Business to devices with MDM control & block access from devices that have become out of compliance or removed MDM control  
  • Active Directory credentials protection- Avoid using and storing AD credentials on device by defining dedicated Lync credentials or using RSA tokens.  
  • Ethical wall- Solves ethical and compliance regulations, security and data protection issues by applying policies based on specific users , groups and domains/companies controlling activities such as  IM, file transfer, meeting, audio, video. 
  • Skype application firewall - The firewall handles security threats related to guest and anonymous requests sent to the corporate network. The firewall performs request rewrite (session termination), protocol level sanitization (inspect for malicious code) and application level inspection (validate content such as meeting ID and stricture or request).  
  • DLP Engine - Apply content rules policies based on group membership with incident actions of block, mask or notify. Also support commercial DLP integration with Symantec, ForcePoint (Websense), GTB and other vendors.  
  • ·No password authentication- Allow sign in without using password while trusting MDM identity.
SphereShield Security and Compliance

Program Specifications

Version Support Skype for Business Server 2015
Certified As Compliance
Version Tested SphereShield Security & Compliance Version 3.4
Qualified Date 12/14/2016