Includes a policy engine for per-user, identity-based access to files, URLs, applications and networks; supports device-based pre-authorization and authentication, easily interfaces with multi-factor authentication providers such as RSA, Duo, Syferlock and others, and provides extensive statistics and logs.