Current Filter: Security>>>>>Review>

   

Data leak prevention is an essential part of the governance, risk and compliance (GRC) equation, but many DLP solutions can take months to implement.

GhangorCloud's Information Security Enforcer (ISE) changes the landscape, as this 4th generation solution can be deployed in a matter of weeks. It achieves this with its unique automatic data classification engine, which dispenses with the time - consuming processes of identifying confidential data, fingerprinting it and defining user access privileges.

The relationship between sensitive data and users can be complex, making it difficult to protect against inadvertent or deliberate insider data breaches. ISE neatly circumvents this, as its ontology-based system uses sets of predefined concepts for real- time classification of structured and unstructured data.

This reduces management overheads, but ISE goes further by automatically generating security policies. This is one reason why conventional DLP solutions take so long to deploy, while but ISE can create new policies with a single button click.

ISE is easy to deploy, as the appliance is located in front of the protected systems and services where it acts as a transparent proxy. It integrates seamlessly with directory servers, such as LDAP and Active Directory, and only requires an Exchange plug-in to monitor email activity.

ISE automatically imports pre-existing user identity & role information from repositories such as Active Directory, LDAP etc and can perform duplex mode synchronisation.

The main ISE web console is very intuitive and opens with an informative dashboard showing all activity, including data breaches, or extrusion incidents, which can be drilled down into for more detail.

ISE retrieves all information about users, functional groups, departments and so on, which it uses to generate enforcement policies. Actors are a unique concept of ISE, as these define users, guests, groups, machines, even USB devices and printers; in fact anything that can potentially send or receive data.

GhangorCloud's 3D correlation uses patented algorithms to extract information about user and group identities, and ascertain their security profiles. Customers just need to assign source and destination security clearances at the group level and this will be automatically applied to all users in that group.

This unique feature allows one of five clearance levels to be assigned, which determines not just what data a user can access, but who and what they can communicate with. It's easy to see how these clearances interact with each other, as the ISE dashboard provides an accessibility map.

From the classification tab, we viewed all structured data being monitored, such as credit card and social security numbers. GhangorCloud's built-in knowledge representation system handles unstructured data and it can provide customised ontology systems based on the intended use.

We tested ISE by sending emails between users via OWA, some with confidential attachments. When we tried to send them to unauthorised destinations, the source Actor received an explanatory rejection message and the ISE administrator was alerted. ISE also stopped some emails being sent, with it requiring authorisation before releasing them. If a malicious insider tried to release the email, ISE escalated it, allowing administrators to view the incident and decide whether to allow, deny, encrypt or hold the message.

ISE provides full forensic log trails and integrates with existing log servers using GhangorCloud's APIs. Extensive on-appliance reporting is provided where we quickly viewed top violations, extruded resources, directions and locations.

Enterprises worried about lengthy deployment processes can rest easy with GhangorCloud, as its Information Security Enforcer heralds in a new DLP paradigm. We found it can be up and running in weeks, and is very affordable, as its CAPEX and OPEX are substantially lower than that of GhangorCloud's competitors. CS

Product: Information Security Enforcer
Supplier: GhangorCloud
Web site: www.ghangorcloud.com
Sales: sales@ghangorcloud.com
Tel: +1 408 713 3303