Jump to content



Photo

Data Loss Prevention Advice


  • Please log in to reply
12 replies to this topic

#1 puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 11 August 2014 - 03:39

Anyone out there using any form of DLP that they are happy with?   I know Mcafee, Websense, and Symantec have products out there for this. This is needed to scan all outbound email for key words. 

 

Thanks




#2 Walid W.

Walid W.

    I love Orcinus Orca

  • Tech Issues Solved: 3
  • Joined: 19-July 08
  • Location: Lost somewhere in Sweden
  • OS: Ubuntu, Debian, Backtrack 5r, Windows 7 & XP
  • Phone: iPhone 3GS, iPhone 4s & HTC One

Posted 11 August 2014 - 09:28

As for us we're not using it honestly. I did a quick googling and found this.

 

https://code.google.com/p/opendlp/



#3 OP puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 11 August 2014 - 13:17

As for us we're not using it honestly. I did a quick googling and found this.

 

https://code.google.com/p/opendlp/

Thanks Walid, will this work for email scanning?



#4 Walid W.

Walid W.

    I love Orcinus Orca

  • Tech Issues Solved: 3
  • Joined: 19-July 08
  • Location: Lost somewhere in Sweden
  • OS: Ubuntu, Debian, Backtrack 5r, Windows 7 & XP
  • Phone: iPhone 3GS, iPhone 4s & HTC One

Posted 11 August 2014 - 14:42

I actually have no idea. I will take a closer look at it once I am home and sitting behind a pc (on phone right now)

#5 +BudMan

BudMan

    Neowinian Senior

  • Tech Issues Solved: 106
  • Joined: 04-July 02
  • Location: Schaumburg, IL
  • OS: Win7, Vista, 2k3, 2k8, XP, Linux, FreeBSD, OSX, etc. etc.

Posted 11 August 2014 - 14:48

Off the top I would say no, that product does not look to be designed for that use. Normally a dlp product that checks email would be in the email chain as a MTA.. example a smarthost where you setup your email system to send outgoing mail to dlp system, and then the dlp system would send it on or block it, encrypt it if that has been setup and possible to destination, etc.

There is an community edition of mydlp, which does do email scanning via a mta you insert into your chain.

http://en.wikipedia.org/wiki/MyDLP

#6 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 35
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 11 August 2014 - 15:20

Your spam service/server/firewall should be able to support what you want based on keywords or files being sent out.  If you host mail, you may have your mail server be setup for manager approvals when sending out attachments or sensitive information (I know exchange supports this).



#7 OP puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 11 August 2014 - 17:11

Your spam service/server/firewall should be able to support what you want based on keywords or files being sent out.  If you host mail, you may have your mail server be setup for manager approvals when sending out attachments or sensitive information (I know exchange supports this).

Tried this on exchange using transport rules, did not do what we needed it to. Would not search inside archive files. 



#8 sc302

sc302

    Neowinian Senior

  • Tech Issues Solved: 35
  • Joined: 12-July 05
  • Location: NJ, USA

Posted 11 August 2014 - 18:31

different spam service and/or different rules are needed. 

 

http://alanhardisty....d-by-moderator/

 

This should do.  this will require managers approval of sending attachments, a second eye if you will.  Hopefully the entire department isn't dishonest and isn't trying to bury the company, the owner or hr has hired trustworthy people.  Even the managers can't approve themselves though, if that is the way you wanted it.



#9 OP puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 12 August 2014 - 15:47

Thank you for the ideas all!



#10 +goretsky

goretsky

    Neowinian Senior

  • Tech Issues Solved: 3
  • Joined: 12-March 04
  • Location: Southern California

Posted 13 August 2014 - 06:49

Hello,

 

Can you tell us a little more about your exact requirements?  That might make it easier to make suggestions.

 

 

Regards,

 

Aryeh Goretsky



#11 OP puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 13 August 2014 - 13:52

Hello,

 

Can you tell us a little more about your exact requirements?  That might make it easier to make suggestions.

 

 

Regards,

 

Aryeh Goretsky

Aryeh, I need all outbound email scanned for keywords and hold them for review. Including attachments.  I have been looking into a Trend product. But we use Mimecast, and apparently it can scan outbound emails for certain criteria. 



#12 +goretsky

goretsky

    Neowinian Senior

  • Tech Issues Solved: 3
  • Joined: 12-March 04
  • Location: Southern California

Posted 14 August 2014 - 05:39

Hello,

So you need scanning of just the body of the email, or subject, or both?

 

For attachments, are looking at filename or extension, or content-scanning, or some mixture?  What about archived attachments (.ZIP, .RAR, etc.)?

 

Regards,

 

Aryeh Goretsky



#13 OP puma1

puma1

    Fidgy1

  • Joined: 20-April 04

Posted 20 August 2014 - 12:59

Hello,

So you need scanning of just the body of the email, or subject, or both?

 

For attachments, are looking at filename or extension, or content-scanning, or some mixture?  What about archived attachments (.ZIP, .RAR, etc.)?

 

Regards,

 

Aryeh Goretsky

Subject, body, and inside attachments. I was able to get this done with the spam system we use that also handled all outgoing mail. 

Thank you for your response.