BCD Travel
Enterprise organizations are faced with the challenges of identifying and protecting sensitive digital information assets. Data Loss Prevention (DLP) solutions help organizations protect such data, but few actually help organizations understand what their sensitive data is and how it is being used. Tuning rules for a legacy DLP system sounds simple but in reality requires a tedious and time-consuming trial and error process. Until now, organizations were expected to take the weeks and months to tune the system. Reconnex Data Loss Profiler solves this problem.
Reconnex Data Loss Profiler is an appliance-based solution for learning and leverages the core components of the fully-featured iGuard Data-in-Motion appliance. Profiler is easily deployed on the network near the WAN using a SPAN or tap and immediately begins capturing all outbound SMTP email and webmail traffic.
. This information is then classified, indexed, and stored. The intuitive user interface allows you to quickly search for sensitive material – such as your intellectual property, social security numbers, or other sensitive information – and identify how it is being used and who is seeing it.
Profiler can be easily upgraded to a fully-featured Reconnex iGuard, and can also be deployed as a complement to an existing DLP solution to help you get the most value out of it. By providing a powerful searchable repository, Profiler can help you improve the accuracy of your existing third-party DLP solution’s rules while providing valuable data to support investigations.
Reconnex Data Loss Profiler helps you understand your data loss risk. By providing a powerful search interface, organizations can quickly learn what their sensitive data is, who is seeing it, and how it is being used. Consider the following real-world examples:
- Identify compliance risks – a fortune 1000 retailer struggling with PCI used the Profiler to identify broken business processes that caused customer credit card data to be regularly transmitted unencrypted
- Ensure acceptable use - a global travel company used the Profiler to identify employees sharing illicit content (pictures, movie files) using email and webmail
- Investigation support – the same company used Profiler to identify other activity that the same users were involved in, finding that users were hosting a server on the company network and sharing illict content on the Internet
- Identify intellectual property - a high-tech company deployed Profiler to identify where unreleased product data was going, learning that a pair of recently-resigned employees had been sending source code to a competitor
- Tune an existing DLP solution – a large insurance company used Profiler’s learning to augment an existing DLP product for investigations and improving rule accuracy
Reconnex Data Loss Profiler helps you understand your data loss risk. By providing a powerful search interface, organizations can quickly learn what their sensitive data is, who is seeing it, and how it is being used. Profiler provides the following benefits to your organization:
- Understand your risk – full visibility into outbound SMTP email and webmail traffic, helping identify content and understand your risk, what your sensitive data is, who is seeing it, and how it is being used
- Understand compliance posture – quickly identify content transfers that may impact your compliance posture including SOX, GLBA, PCI, HIPAA, FERPA, ITAR, state privacy laws, and more
- Investigation support – search for user activity to understand behavior patterns and to augment other investigation tools. Profiler allows you to tune searches using keywords, content types, templates, concepts, timestamps, and other metadata
- Complementary to existing security tools – Profiler complements existing security infrastructure, including legacy DLP solutions. Profiler can provide valuable information to support investigations and help you improve legacy DLP system rule accuracy
- Investment protection – Profiler can be upgraded quickly to a fully-featured Reconnex iGuard appliance in the event that full-featured DLP capabilities are required
Reconnex Data Loss Profiler is built on the secure, performance-oriented iGuard appliance. Profiler provides the following features:
- Transparent deployment – Profiler is a passive device and does not impact network traffic. No desktop or server agents are required for deployment. Profiler integrates into the network using a SPAN port or network tap
- Simple installation – Profiler requires only basic network settings and automatically begins capturing, classifying, and indexing content once attached to the network
- Simplified Search – Profiler comes packed with pre-built concepts to simplify searches, including acceptable use, compliance, and intellectual property. Searches can refined using keywords, email addresses, domains, timestamps, content types, templates, and more
- Flexible Reporting – Search result grouping and filtering helps you to focus in on the data you want to see in the way you want to see it. Search results can be grouped by any contextual parameter including email address, content, location, domain, content type, file parameters, and more. Dashboard views are provided to simplify and summarize search results
- Platform Support – Profiler can be deployed on the Reconnex iGuard 1650, providing up to 500GB of retention capacity, or the Reconnex iGuard 3650, providing up to 6TB of retention capacity
- Embedded Security – The iGuard appliance is hardened to ensure confidentiality, integrity, and availability. All management access is done through SSL
