Byos mGateway Instruction sheet

Byos µGatewvay-
Evaluation Guide

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
Welcome to the Byos µGateway Evaluation Guide!
Here is the Evaluation Guide to help you make the most out of the Byos µGateway
(“micro-gateway”) and take advantage of all its features. Please carefully review each
section below and if you have any questions, please reach out to [e-mail] or
call 1-902-448-3031 for further assistance - we are based in Atlantic Time. You can also
message us through the chatbot on our website.

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
Byos µGateway Technical Specifications:
• Type of device: Plug-and-Play USB Ethernet Gateway
(RNDIS Gadget).
• Port Requirements: USB-C (USB 3.0/3.1 adapters can
be used to connect to a USB-A port).
• Power consumption: Under 5W. The Byos μGateway
can be powered solely through its male USB-C
connector.
• OS Requirements: Any OS compatible with USB-OTG
(The product has been tested with Windows, OSX, iOS,
and Linux operating systems).
• Driver requirements: None (For some Windows
devices: USB-OTG driver auto-installs over Wi-Fi if
not present).
• Software Requirements: Home Dashboard accessed
via web browser; tested with current versions of
Chrome, Firefox, Safari, Internet Explorer, Edge, and
Opera. No additional plug-ins or software required.
• Manufactured: In Canada and USA.
• Dimensions: 10.5 x 3.4 x 1 cm (4.1 x 1.3 x 0.4 in)
Step 1: Learn more about the Byos µGateway 4
Step 2: Login and Connect to the Wi-Fi 5
Step 3: The Byos µGateway in action 6
Robust Protection Mechanisms 6
Near Zero Performance Impact 7
Autoconnect Feature 7
Reviewing Controlled Access; Reviewing Controlled Access & Setting Up Desired
Internet Traffic Security Policies 7
Optional - Advanced Security Testing your μGateway 7
Step 4: What’s under the hood? 8
Security and Privacy of the μGateway 8
Troubleshooting 9
I’m using a Windows Laptop or Tablet and the Home Dashboard at “My.byos/home”
isn’t loading… 9
Enterprise Deployment and Management Overview 10
Byos Company Overview 11
Table of Contents

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
4
Step 1: Learn more about the Byos µGateway
The µGateway retails for $299 including hardware and
a 1 year security service subscription, and is available for
purchase at byos.io. The µGateway is the only endpoint
microse-gmentation solution that isolates and protects
your devices from dirty Wi-Fi networks.
Product Overview
The µGateway is the endpoint security solution built
specically for protection on public Wi-Fi networks like
those found in Airports, Hotels, Conferences, Cafes as
well as guest networks - what we call “dirty networks”.
The µGateway is the world’s only plug-and-play,
transparent security gateway on a USB device, allowing
individuals, employees, and devices to safely and
securely connect any network, regardless of their
location or network environment.
We took the proven approach of network segmentation
but applied it to the endpoint, creating a micro-segment
of 1.
The µGateway facilitates the endpoint’s connection to the local network,
sitting at the ingress/egress point of communication between the
network and the endpoint. This eliminates any device exposure to the
network, making it invisible to attackers.
Even with the use of an antivirus, VPN, or secure web gateway, there are
a number of attacks that endpoints are remain vulnerable to, which are
protected by the µGateway such as:
• Scanning/Enumeration/Fingerprinting
• Eavesdropping
• Remote Access Exploits
• Evil-twin Wi-Fi
• Lateral network movement
• DNS hacking
Endpoint Micro-Segment
(Raw TCP/IP Trac)
Byos µGateway
Hardware-Enforced Isolation

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
5
1. Turn off your device’s Wi-Fi (place it in airplane mode). Plug in
the µGateway using either the standard USB-C port or use an
adapter for an USB-A port.
2. The µGateway will take 20 seconds to boot up. After 20
seconds, open up a browser and type “my.byos/home” into the
URL bar. This will take you to the Sign-in page of the Home
Dashboard. This dashboard is self-hosted on the µGateway.
3. Create your account username and password, and log in. Click
“Remember Me” so you will log in automatically every time you
plug in your μGateway.
4. You will now be prompted to select a network in range to
connect to. Select your desired network and type in the
password. The device will now perform a network health and
security check before connecting. If the network has a captive
portal, you will be prompted to accept its terms before trac
will be allowed to ow.
5. If you wish to connect to a hidden network, click cancel and
then navigate to the Wi-Fi page from the button in the left
navigation bar. Once on the Wi-Fi page, click “Connect to a
hidden network” and enter in the credentials.
6. Once the connection is established, you will now see the home
Dashboard with your network trac map by country. You are
now free to work securely.
7. Optional: Congure your VPN - If you also subscribe to a VPN
service, you can run it through the μGateway. Click “VPN” on the
left navigation bar, click “Add VPN, and select your provider.
Step 2: Login and Connect to the Wi-Fi
Now that you are connected
to the internet using your
Byos μGateway, you are fully
isolated from the rest of the
devices on the network and
can close the dashboard.
You will need to use the dashboard to
connect to the Wi-Fi every time you enter a
new network environment. We also suggest
always using the µGateway wherever you are
to protect yourself from the risks associated
with public and Home Wi-Fi networks.
How to Connect for the First Time:

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
6
Step 3: The Byos µGateway in Action
Robust Protection Mechanisms
The µGateway is a “security stack on a stick”
processing all of the protection services on its
hardware, with no protection dependencies in the
cloud. The specic security services running on the
µGateway include:
• Controlled Access - Byos runs a bi-directional
rewall, offering incoming and outgoing access
control based on country-based and protocol-
based trac, restricting specic domain names,
IP addresses, and ports.
• Wi-Fi Protection - prevents the user’s Wi-Fi
connection from being intercepted, cloned,
bypassed or hacked.
• Eavesdropping Prevention - the µGateway
maintains direct and condential
communications with the network gateway,
without allowing the poisoning of the routing
tables.
• Private DNS Queries - the µGateway runs an
in-device Encrypted DNS server, preserving
condentiality of the user’s browsing data.
• Inltration Prevention - the µGateway detects
changes in the routing of packets to the Internet,
and takes the necessary actions to prevent any
data leakage.
• Trac Volume Control - the µGateway detects exponential changes
in network trac volume, often triggered by hidden malware
running on the user’s device.
• Attack Detection - the µGateway runs an internal IPS/IDS service,
detecting directed threats, blocking ngerprinting, enumeration,
DoS, and exploit attacks. Any attack attempts against the µGateway
will alert the user.
• Tracking and Ad-blocking - the µGateway also blocks ads and
tracking transparently on the network level, without requiring
additional software.
Protected
Terminal
Compromised
Terminal
Intrusion
Public Wi-Fi
Router

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
7
Step 3: The Byos µGateway in Action
Reviewing Controlled Access; Reviewing
Controlled Access & Setting Up Desired
Internet Traffic Security Policies
In an enterprise setting, IT admins typically congure
access permissions based on corporate policies and
automatically push these security rules to individual
µGateways under their control. To sample how this
functionalvty on your individual µGateway device, in
the the “Access Control” button on the left navigation
bar of the home Dashboard, you will see commands
for:
1. Block Country - Selecting specic countries to
block will forbid your device from establishing a
connection with a server located in said country.
Blocking a country turns it red on the home
dashboard’s network trac map. The easiest
way to block trac to a specic country from the
home dashboard involves simply right clicking on
the country you wish to block.
2. Block Domain Name, IP Addresses and Ports
these features will block trac from specic
websites, IP addresses, and ports.
The whole premise behind the μGateway is that you
should be in control of what countries, domains, IP
addresses, and ports your device connects to. Most
people don’t realize the amount of connections their
devices make on a day-to-day basis, let alone which
countries these servers are in.
If you would like our assistance setting up these tests,
please contact us at [e-mail].
Try it yourself: simply run a connection speed
test with and without your µGateway, and
compare the results.
Try it yourself: connect to a new network via the
μGateway , unplug your μGateway and replug it in,
seeing that it connects automatically.
Near Zero Performance Impact
The µGateway is powered by the USB
port, without the need of external
power, and unlike software solutions,
it doesn’t steal computing resources
from your device. It will also not
restrict the internet connection
speed.
Autoconnect Feature
Your μGateway will store the network
credentials for any previous network
connections so that when you replug
it in and the same network is in range,
the μGateway will autoconnect
for a transparent and seamless
connection.
Optional - Advanced Security Testing your μGateway
The protection mechanisms offered Byos μGateway can be veried by performing
various penetration tests on the device, including:
• Sning/Eavesdropping
• Exploit Attacks
• Man-in-the-Middle Attacks
• Scanning/Fingerprinting/Enumeration Attacks
• Black Box penetration test methods (SQL injection, XSS, DDoS, etc.)

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
8
Step 4: What’s under the hood?
The µGateway is technology-agnostic meaning it works with any type of endpoint, regardless of the OS type or version; it does not
requireinstallation of anysoftwareagentonthehost endpoint.The µGatewayruns a proprietary, hardened LinuxOSthathascustomized
network services and signed Hardware drivers. It also has a proprietary attack knowledge base and network health detection service.
For hardware security, the µGateway has an encrypted le system, secure boot, no JTAG connector, and PKI-signed code, making it
resistant to hardware attacks.
The μGateway has a proprietary Hardware board that is manufactured in Canada and the USA. It has a certied supply chain of
components and a certied chain of custody of Software, so we have full assurance the product does not have hidden backdoors.
Security and Privacy of the μGateway
We perform extensive white-box and black-
box testing on the µGateway to ensure our
product is secure. The µGateway is NIST,
SANS Top 20, and COBIT compliant.
For industry security validation, we also run a
bug bounty program. A bug bounty program
allows security researchers to perform
penetration testing against the µGateway
to nd security vulnerabilities/weaknesses
and to validate the protection claims made,
reporting the bugs found to our internal
security team. You can nd more information
about the results of our previous bug bounty
events at byos.io/resources.
To preserve the users’ privacy, we never
collect logs about your usage of the
μGateway. The only time the µGateway will
communicate with our servers is during
boot; It will check to see if the license is
valid and if there are any updates available.
This can be veried by analyzing the trac
between the µGateway and the router.
Byos is manufactured in North America, with a certified supply chain of components.

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
9
Troubleshooting
I’m using a Windows Laptop or Tablet and the Home Dashboard at “my.byos/home” isn’t loading…
If the Home Dashboard at “my.byos/home” isn’t loading on your Windows laptop or tablet, the USB-OTG driver is likely disabled. Open up
your network settings, and see if your device has recognized the µGateway. The µGateway uses the “USB-OTG” specication and should
be recognized by your device as a “RNDIS/Ethernet Gadget”.
If your device does not recognize µGateway, unplug it. The driver will be
automatically installed on the host device if the device has an internet
connection the rst time the Byos μGateway is plugged in. Turn your
Wi-Fi back on and re-plug in the µGateway; leaving your Wi-Fi on while
the µGateway is booting up should trigger an automatic download of
the driver.
If the µGateway is still not being recognized by your device, visit this
link for instructions to re-install the USB-OTG driver.

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
10
Enterprise Deployment and Management Overview
For the Enterprise
For enterprise clients, the Byos Endpoint Micro-Segmentation Solution is delivered with an enterprise-class Management Console to
deploy and manage μGateways at scale.
This allows IT security teams to condently, eciently and cost-effectively manage a global workforce centrally, streamlining user
and device provisioning, all while having granular visibility and control over remote endpoint corporate access connections. The
μGateway also facilitates Zero Trust access from any remote network connection.

Patent Pending. © 2020 Byos Inc. - Halifax, Nova Scotia - All Rights Reserved - byos.io
11
Byos Company Overview
Byos is the endpoint micro-segmentation company dedicated to helping organizations protect themselves from the risk of ubiquitous
remote, guest and IoT network connectivity. Byos allows employees, contractors and devices to safely and securely connect to any
network, regardless of their location or network environment.
The Byos μGateway, implemented as a portable “security stack on a USB stick” or as embedded circuitry directly in a device,
automatically creates a micro-segment of 1 delivering hardware enforced protection of the device from the inherent risks on dirty
networks while allowing secure zero-trust based access to corporate resources. The Byos Management Console provides centralized
policy management and reporting across enterprise wide deployments of μGateways.
Byos is backed by leading Silicon Valley investors and advisors, is headquartered in Halifax Canada, and sources and manufactures all
components in North America. With Byos, work from home, traveling and remote workforces are Safe to Connect, and Free to Work.
(To learn more and get started securing your remote WiFi connections visit byos.io/get-started).