Data Loss Prevention Advice


Recommended Posts

Anyone out there using any form of DLP that they are happy with?   I know Mcafee, Websense, and Symantec have products out there for this. This is needed to scan all outbound email for key words. 

 

Thanks

Link to comment
Share on other sites

I actually have no idea. I will take a closer look at it once I am home and sitting behind a pc (on phone right now)

Link to comment
Share on other sites

Off the top I would say no, that product does not look to be designed for that use. Normally a dlp product that checks email would be in the email chain as a MTA.. example a smarthost where you setup your email system to send outgoing mail to dlp system, and then the dlp system would send it on or block it, encrypt it if that has been setup and possible to destination, etc.

There is an community edition of mydlp, which does do email scanning via a mta you insert into your chain.

http://en.wikipedia.org/wiki/MyDLP

Link to comment
Share on other sites

Your spam service/server/firewall should be able to support what you want based on keywords or files being sent out.  If you host mail, you may have your mail server be setup for manager approvals when sending out attachments or sensitive information (I know exchange supports this).

Link to comment
Share on other sites

Your spam service/server/firewall should be able to support what you want based on keywords or files being sent out.  If you host mail, you may have your mail server be setup for manager approvals when sending out attachments or sensitive information (I know exchange supports this).

Tried this on exchange using transport rules, did not do what we needed it to. Would not search inside archive files. 

Link to comment
Share on other sites

different spam service and/or different rules are needed. 

 

http://alanhardisty.wordpress.com/2011/10/31/how-to-configure-exchange-2007-2010-to-delay-sending-of-emails-with-large-attachments-until-approved-by-moderator/

 

This should do.  this will require managers approval of sending attachments, a second eye if you will.  Hopefully the entire department isn't dishonest and isn't trying to bury the company, the owner or hr has hired trustworthy people.  Even the managers can't approve themselves though, if that is the way you wanted it.

Link to comment
Share on other sites

Hello,

 

Can you tell us a little more about your exact requirements?  That might make it easier to make suggestions.

 

 

Regards,

 

Aryeh Goretsky

Link to comment
Share on other sites

Hello,

 

Can you tell us a little more about your exact requirements?  That might make it easier to make suggestions.

 

 

Regards,

 

Aryeh Goretsky

Aryeh, I need all outbound email scanned for keywords and hold them for review. Including attachments.  I have been looking into a Trend product. But we use Mimecast, and apparently it can scan outbound emails for certain criteria. 

Link to comment
Share on other sites

Hello,

So you need scanning of just the body of the email, or subject, or both?

 

For attachments, are looking at filename or extension, or content-scanning, or some mixture?  What about archived attachments (.ZIP, .RAR, etc.)?

 

Regards,

 

Aryeh Goretsky

Link to comment
Share on other sites

Hello,

So you need scanning of just the body of the email, or subject, or both?

 

For attachments, are looking at filename or extension, or content-scanning, or some mixture?  What about archived attachments (.ZIP, .RAR, etc.)?

 

Regards,

 

Aryeh Goretsky

Subject, body, and inside attachments. I was able to get this done with the spam system we use that also handled all outgoing mail. 

Thank you for your response. 

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.