Next-gen DLP-based system Risk Monitor enables users to prohibit file uploads to any websites.
SearchInform has updated Risk Monitor blocking features for preventing information leaks. To restrict file transfer via HTTP(S) protocol, convenient and quick-to-configure blocking option has been added to the system. From now on, information security officers can control upload of confidential files to any sites, in web versions of messengers, mail, and cloud storages.
Unlike blocking of data transmission over specific channels, restrictions on file transfer over HTTP(S) are general. Several websites of different types can be specified in one rule. A rule will be activated if an employee attempts to upload a file with specific name or extension to any of the specified websites.
Blocking rules can be selectively applied to individual users, PCs and even browsers. In the analytical console of Risk Monitor, an information security officer can check who tried to bypass restrictions and what exactly they wanted to upload to the Internet.
“There are many ways to restrict the transfer of sensitive data in Risk Monitor. With the new type of blocking rules, we create another scenario for a more flexible restriction on sending data. For example, within messengers blocking, access to the web versions of messengers will be fully blocked. But restricting files sending via HTTP(S) leaves the possibility of using web messengers for communication. Only the most critical method of sendingin terms of data leaks, which is attached files, is blocked,” said SearchInform Leading Analyst Sergio Bertoni.
“The blocking we have added to Risk Monitor focuses on the transfer of data via the HTTP(S) protocol. Therefore, the DLP system quickly responds to the incident, since it does not need to analyse each uploaded file to make a decision on blocking. The method is not tied to one specifictype of websites. Therefore, corporate documents will not leak to the Internet, even via a simple online PDF viewer,” added Bertoni.
ABOUT SEARCHINFORM
SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, IS outsourcing service.
Subscribe to get helpful articles and white papers.
We discuss industry trends and give advice on how to deal with data leaks and cyber incidents.
Subscribe to our newsletter and receive a bright and useful tutorial Explaining Information Security in 4 steps!
Subscribe to our newsletter and receive case studies in comics!