Infowatch Traffic Monitor Standard

Features
A software solution for monitoring and analyzing information, allowing you to monitor the main channels through which data is distributed and leaked. Traffic monitoring and filtering Analysis and decision making Storage and retrospective analysis of data Traffic Monitoring and Filtering InfoWatch Traffic Monitor Standard works at the gateway level and monitors and filters traffic sent via SMTP (corporate mail system), HTTP (Internet), and instant messaging protocols (such as ICQ).

Analysis and Decision Making

Industry Solutions
Based on its long experience of working with companies in various vertical markets, InfoWatch has developed several content filtering databases, which are optimized to meet the requirements of specific market sectors, such as the financial, oil and gas, telecommunications and other sectors. Vertical solutions Intercepted traffic is first analyzed according to its formal attributes: sender/recipient, date and time sent, type of file. The content of the intercepted file is then extracted and analyzed. The product uses both reactive and proactive technologies to identify confidential information. Reactive technologies include checking for data that matches template formats (telephone numbers, passport numbers, bank details, tax identification numbers, etc.) and using digital fingerprints (this is where certain documents are entered into the product database, and all data leaving the company is checked for its degree of similarity to this reference base). Proactive content analysis is carried out using InfoWatch's unique linguistic analysis technology. This looks for certain words or phrases in information that is being transmitted. It uses standard and industry-specific databases of words and phrases, combined with algorithms to calculate how frequently they occur. This method allows you to protect not only information that has been categorized, but also new data from the moment it is created, without the need for any additional configuration or preliminary processing.

Please note! Integrating InfoWatch Traffic Monitor Standard with Microsoft Active Directory enables single user identification for various data transfer protocols.

Storage and Retrospective Analysis of Data

Intercepted data is stored in the centralized archive for up to 90 days. InfoWatch Traffic Monitor Standard allows you to keep track of the actions carried out by staff with respect to confidential data, and to create detailed statistical reports. The depository can be searched for required data using the formal attributes of the intercepted file (sender/recipient, date and time sent, etc.), the attributes added during the content analysis process, and the content of the intercepted file itself (full-text search). The integrated graphical reporting system provides a clear and accessible record of employee actions with respect to information. So, for example, with the help of Internet usage reports, it is possible to identify instances of misuse of corporate resources, or where CVs have been sent out during work time, and to track cases where information is sent to competitors' sites or to study reviews of the company posted by employees on blogs and forums. The product is supplied with 60 predefined reports that have been developed by InfoWatch based on studying our clients' experiences, and that have proved the most useful in investigating information security violations. The product also allows security officers to create their own reports.

Benefits
InfoWatch Traffic Monitor Standard has been developed for medium-sized companies that are interested in obtaining reliable information about how their corporate information is handled, and in establishing a fully-fledged system to protect their confidential data from internal threats.

Main Benefits of the Product

Wide range of functionality: monitor the most widely used data transmission channels, centralized archive that enables intercepted data to be stored and investigations to be carried out, clear graphical reporting system, single user identification. Quick and easy deployment: InfoWatch Traffic Monitor Standard operates at the gateway level and does not require the installation of software on employee workstations. Regulatory compliance: InfoWatch Traffic Monitor Standard is a tool that can be used to monitor the implementation of information security standards and legal requirements. Developed by a domestic Russian company: InfoWatch Traffic Monitor Standard has a Cyrillic interface, detailed documentation available in Russian, and qualified technical support. It is possible to expand the product's functionality by integrating it with other InfoWatch solutions, or those of third-party developers. For example, it can be integrated with workstation protection modules, such as InfoWatch Device Monitor, or DeviceLock or Lumension Device Control products.

System requirements
InfoWatch Traffic Monitor Standard server
Hardware:
Recommended hardware platform HP ProLiant DL320 G6 server with the following configuration: ProLiant DL 320G6 server E5502 processor 1 HP Smart Array P212/256MB Controller, BBWC 1 HP 500GB 15k LFF SAS 3.5 HotPlug hard drive 2 Mini SAS to Mini SAS 33in Cable Assembly 1 HP 9.5mm DVD drive 1

Software:
Operating system: Red Hat Enterprise Linux Server release 6 64 DBMS: Oracle Standard Edition 11g (included with package supplied, does not require additional licensing)

Management Console
Software:

Operating system: Windows XP (x86-32), Windows 7 (x86-32, x64)