SearchInform Risk Monitor Ramps up Protection Against FTP Leaks
13.12.2024

Next-gen DLP-based system Risk Monitor will help information security experts monitor the transfer of files to FTP servers more closely.

Risk Monitor developers have added new functionalities to the FTPController module. From now on, information security specialists can block file uploads to FTP servers in a flexible manner. This feature will help prevent leaks of confidential information without interrupting work of users with an important part of IT infrastructure.

The updated FTPController can restrict file uploads to external FTP servers by analyzing the content of transferred documents. Thus, the transmission of certain types of information, for example, personal data or commercial secrets, will be blocked. With enabled optical character recognition (OCR), the system can also block images by content, not just text formats.

It is also possible to completely prohibit file uploads via FTP, or set conditions so that data gets blocked selectively and does not affect standard business processes. For example, you can set the restriction on transfer for specific users, computers, processes, IP addresses of FTP servers, as well as for certain files according to their format and attributes (size, name, etc.).

"FTP servers are still used to store corporate data, and, what is especially crucial, to exchange data with external recipients, such as company’s contractors. To ensure continuity of business processes and at the same time prevent data leaks, we have implemented flexible blocking for FTP protocol. This is an effective tool since Risk Monitor allows users to apply restrictions only when transferring sensitive content," SearchInform Leading Analyst Sergio Bertoni said.

"Thus, Risk Monitor protects data when it is uploaded to the server. And the SearchInform FileAuditor DCAP system will guarantee its safe storage and use: the solution classifies files on the FTP servers and strengthens the Risk Monitor policies when control of access rights is required," added Bertoni.

ABOUT SEARCHINFORM

SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, IS outsourcing service.

Letter Subscribe to get helpful articles and white papers. We discuss industry trends and give advice on how to deal with data leaks and cyber incidents.