Secure Enterprise Browser Solution

The Vendor is required to provide a Secure Enterprise Browser (SEB) solution.
- Our environment is characterized by a highly decentralized "hub-and-spoke" administrative model. We require a solution that secures web-based workflows, protects sensitive research data, meets contractual and regulatory requirements, and simplifies access to internal resources while respecting the autonomy of the 150+ departments on campus.
- Administrative Hierarchy and Federated Access
• Centralized oversight: central cybersecurity must be able to push mandatory, non-over ridable policies (e.g., "all departments must disable 3rd-party cookies on financial sites").
• Delegated administration: individual departments (e.g., school of medicine, college of engineering) must have scoped administrative consoles to manage department-specific settings.
• Policy inheritance: describe how your solution handles policy conflicts between central and departmental levels (e.g., most restrictive vs. Specific override).
- Security and Policy Management
• Extension management: capabilities to allow list/blocklist extensions per department.
• DLP controls: granular control over printing, clipboard (copy/paste), and file uploads/downloads, and screen capture based on the sensitivity of the URL or data classification tagging.
• Threat protection: built-in phishing protection, malware sandboxing, and real-time URL filtering.
• Visibility: centralized logging of security events with the ability to export data to a security information and event management (SIEM) solution (e.g., sentinel, elastic search).
• Containment: natively built into the product and offers additional containment options in the event of an incident
- Identity and Access Management (IAM)
• Federated identity: seamless integration with security assertion markup language (SAML 2.0), OpenID connect (OIDC), and ENTRA id.
• Just-in-time provisioning and DE provisioning: automated user onboarding based on directory groups.
• Contextual access: ability to vary browser security posture based on user location, device health, or network origin.