Managing systems across large infrastructures has become easier — while implementation now requires fewer server resources.

SearchInform has optimized the operation of its Next-Gen DLP system, Risk Monitor, and its DCAP system, FileAuditor, for large-scale deployments. Thanks to the updated architecture, the systems can now support up to 10,000 agents per server and manage them simultaneously. This simplifies configuration for security specialists monitoring workstations and file storages across distributed infrastructures.

The update is implemented in both systems through the EndpointController administration component. Performance gains were achieved by redistributing the computational load when processing data from agents. As a result, overall system efficiency has increased: previously, one administration server could parse data from around 3,000 agents, and now it can process three times more.

With the new architecture, hardware resources are also used more efficiently, which allows reducing system requirements by up to 25% during DLP and DCAP deployments, while processing speed continues to grow.

“This update significantly simplifies the work of information security teams in large organizations. It allows full infrastructure control from a single console without spending time synchronizing settings across multiple EndpointController servers. Already deployed systems can also be optimized – the update enables merging several servers into one without losing data,” said Sergio Bertoni, Lead Analyst at SearchInform.

“This architectural upgrade is another step in SearchInform’s consistent strategy to optimize product performance. We continuously enhance the speed and scalability of our systems to ensure they integrate seamlessly into any infrastructure regardless of size. For example, next year we plan to increase the number of controlled agents per one EndpointController server to 12-15 thousand and introduce a unified interface for multi-server deployments,” he added.

Earlier, SearchInform Risk Monitor introduced automatic database backup and migration to help with system scaling and clustering in client infrastructures. To address similar needs, SearchInform SIEM was enriched with an external-connector feature, enabling streamlined interaction with remote servers for distributed deployments.

ABOUT SEARCHINFORM

SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, IS outsourcing service.