|
 Websense
Data Security Suite
|
About Websense Data Security Suite:
 |
Discovers, monitors and protects information on the network and the endpoint for
organizations with over 500 users; especially well-suited to regulated industries.
- Prevent data loss
- Secure business processes
- Manage compliance and risk
|
Don’t make the next security headline. Protecting customer and confidential
data from malicious or accidental information leaks has become a top security
challenge facing organisations today. Websense can offer IT executives facing
this challenge a visionary new solution.
Websense® Data Security Suite is a leading solution to prevent information leaks; be they caused
accidentally from inside your organisation or as a result of a malicious attack from outside the company.
Websense Data Security Suite discovers where information is located in a network, monitors who is using
the information and how they are using it. It protects valuable corporate assets, secures business
processes and minimises the risk associated with conducting business in a connected world. Highly
regulated industries will also benefit from improved compliance with data management regimes.
Websense has the only data loss prevention (DLP) solution that includes a robust data analysis engine that
integrates with directory services and web intelligence solutions to provide in-depth reporting of users,
groups, and destinations. It includes intelligent protocol inspection to detect protocol communications regardless
of port, and automatically categorises incidents by type, regulation, and severity to provide valuable insight
into regulatory compliance and corporate governance incidents. Powerful forensics and distributed analysis
technology allows sharing of remediation tasks across large, decentralised organisations for better
efficiency, while core policy decisions are administered centrally.
Websense Data Security Suite includes four, fully integrated modules
(Check on tabs):
- Websense Data Discover – Discovers and classifies data distributed throughout the enterprise
- Websense Data Monitor – Monitors who is using what data, and how
- Websense Data Protect – Protects data with policy-based controls that map to business processes
- Websense Data Endpoint – Extends data security to the endpoint with integrated management and reporting
How Websense Data Security Suite works
Websense Data Security Suite enables organisations to secure privileged and confidential data
with a unique appreciation of information content, context, and destination by:
- Discovering the location of sensitive data inside the network
- Monitoring the data as it travels around and beyond the organisation
- Protecting the data with policy-based controls that reflect business processes
Discover
Websense Data Security Suite discovers information located throughout the network. Armed with the
knowledge of where data is, organisations can identify broken business processes, create efficient
workflows, and establish policies to protect confidential information.
Monitor
Websense Data Security Suite provides complete real-time monitoring of your information wherever it
resides or method of transmission; even actions such as printing are included in the monitoring process.
Websense Data Security Suite passively monitors most business communications—both external and
internal—including a wide range of protocols such as email, network printing, FTP, HTTP and HTTPS,
and instant messaging (IM). Administrators can identify what data is being used, where it is being
transmitted, and by whom from a centralised management and reporting console.
Protect
Websense Data Security Suite can protect information while in use or in motion with pre-defined,
automated policy-based enforcement controls. User and content-based policies can be defined to
automatically block, encrypt, quarantine, notify, and remediate potential security breaches.
| Discover, monitor, and protect who can send what
information where and how with Data Security Suite |
| |
DISCOVER |
MONITOR |
PROTECT |
| Who |
Automatically integrate with existing
directory services to enable lookups
for granular user activity detail |
Create customised reports for regular
activity by location, group, and/or
user, and analyse usage trends |
Create policies, automate workflows,
and manage incidents forensically
in real-time |
| What |
Automatically discover structured
and unstructured data with
agentless classification tools |
Report on data usage and accurately
monitor business processes to
examine what data is in use and
by whom |
Secure confidential information by
creating granular policies to restrict
the use of sensitive data to its
intended group of users |
| Where |
Identify where data is stored in the
network and combine with web
intelligence to uncover the type of
website to which it is being sent |
Evaluate business processes to
determine if data is in breach of
compliance requirements and refine
data security policies accordingly |
Enforce policies based on decisionready
destination intelligence, e.g.,
prevent any information from being
sent to compromised websites |
| How |
Determine contextual content
awareness by understanding how
data is used by whom, its format,
and location |
Examine a broad range of
communication channels (e.g., web,
email, IM, print, etc.) and protocols,
regardless of the port used |
Protect data with automated controls
on who sends what information
where, and how, encompassing both
internal and external communication |
Websense Data Security Suite is the only data loss prevention
(DLP) solution that provides content, context, and destination
awareness, allowing administrators to manage who can send what
information, where, and how. Using agent-less discovery tools
and patent pending PreciseID™ fingerprinting technology, Websense
Data Security Suite automatically discovers hosts inside the
network—including servers and endpoints—and the data stored
on them, and allows administrators to create and implement content
enforcement policies. Websense Data Security Suite goes beyond
simple keyword and pattern matching solutions; it provides Deep
Content Control™ to discover, monitor, and protect confidential
information, including personally identifiable information (PII),
regulatory data, and intellectual property (IP), regardless
of the file type or format.
The Websense difference - Deep Content Control™
Websense Data Security Suite goes beyond simple keyword and pattern matching solutions; it provides
Deep Content Control™ to discover, monitor, and protect confidential information. Deep Content Control
combines the ThreatSeeker™ and PreciseID™ technologies to enable organisations to discover
where confidential information is on the network, and secure “what goes where, to whom and how.”
The PreciseID fingerprinting technology generates an “information fingerprint”, a mathematical
representation of a group of characters, words, sentences or data fields within a document, message
or database and precisely identifies the designated sensitive data together with its extended metadata.
Websense Data Security Suite fingerprints information from most databases and analyses hundreds
of megabytes each minute. Its sophisticated algorithms can, for example, distinguish if a social security
number belongs to a customer or an employee, allowing organisations to implement data protection policies
that are relevant to specific business processes. Our fingerprinting technology also covers a broad range
of unstructured data, including financial data, software source code, business plans, and product designs.
Websense Data Security Suite can categorise content by type, risk, and applicable regulation. These
capabilities enable IT departments to enforce security policies, in line with business requirements.
Our ThreatSeeker technology classifies the Web - including sites harbouring emerging web threats
- for accurate, automated policy control of inbound and outbound content that is beyond the capabilities
of anti-virus and intrusion prevention systems. ThreatSeeker technology:
- Finds, blocks and protects customers from Web-based security threats before they can steal business
information and affect business productivity
- Leverages more than 100 proprietary processes and systems to decipher emerging and complex threats
- Combines mathematical algorithms, behaviour profiling, code analysis, and an extensive network of
data mining machines
- Provides ongoing threat intelligence to all Websense security software products
Data Discover:
|
Comprehensive data discovery and classification
- Identify where confidential data is located
- Measure and mitigate risk of data loss
- Support e-discovery for legal controls
|
Websense Data Discover is a comprehensive data discovery
and classification solution. Many organizations don’t know
what data is confidential or where it is stored.
Confidential data that is at rest in unsecured locations is
at risk of being lost.
Websense Data Discover provides agent-less network and
data discovery to efficiently locate all confidential
information—on laptops, desktops, fileservers, etc.—and
classify it. Websense Data Discover provides situational
awareness of data stored throughout the organization to
support data security policies, and can be purchased alone
or deployed as part of the fully integrated Websense Data
Security Suite.
- Accurately identify where confidential data
is located
- Measure and mitigate the risk of data loss
- Support e-discovery for legal and governance
controls
Websense Data Security Suite discovers data stored
throughout the network: in data repositories, file shares,
and whether on servers or endpoints. Armed with the
knowledge of where data is, organizations can identify
broken business processes, create efficient workflows, and
establish policies to protect confidential data.
PreciseID, included
with Websense Data Security Suite, is a third-generation
data fingerprinting technology that goes far beyond simple
keyword, pattern matching, and regular expression engines.
PreciseID fingerprints both structured and unstructured data
regardless of file type or format. Websense Data Security
Suite creates multiple fingerprints per file via a one-way
mathematical representation, analyzing the content within
the document so that it can monitor and protect the data no
matter how it has been manipulated. PreciseID provides the
industry’s lowest rate of false positives and false
negatives by using multiple detection methods for in-depth
data analysis, correlating relational data points as well as
metadata. This gives organizations decision-ready
information they can act on.
Websense Data Security Suite fingerprints data from most
databases and analyzes hundreds of megabytes each minute.
Its sophisticated algorithms can distinguish if a Social
Security number belongs to a customer or an employee,
allowing organizations to implement data protection policies
that are relevant to specific business processes. Websense
Data Security Suite also covers a broad range of
unstructured data, including financial data, software source
code, business plans, and product designs. It categorizes
the content by its type, risk, and/or applicable
state/federal regulation. These capabilities enable IT
departments to establish enforceable security policies that
are in line with business requirements.
There are multiple
techniques to classify and identify information, but
only PreciseID™ NLP offers the most accurate and
granular data loss prevention
Data Monitor:
|
Monitoring of internal and external communications
- Visibility into confidential communications
- Compliance and governance auditing
- Measure and mitigate risk
|
Websense Data Monitor is an easy-to-use solution for
enterprise-wide passive monitoring of business
communications, both external and internal, including Web,
email, instant messaging, and more. It includes over 600
built-in policy templates for regulatory compliance and
corporate governance for out-of-the box, real-time
situational awareness. Websense Data Monitor helps
organizations audit business processes with an advanced
policy framework that identifies who is sending what data
where and how, providing actionable intelligence to reduce
the risk of data loss and to manage compliance.
- Visibility into communications containing
confidential data
- Compliance and governance auditing
- Measure and mitigate the risk of data loss
Websense Data Security Suite provides real-time
monitoring of your data controls whether information resides
on a server or an endpoint, is transferred to a USB or
optical drive, or is sent by email, FTP, HTTP, or printed.
Websense Data Security Suite passively monitors most
business communications—both external and internal—including
a wide range of protocols such as email, network printing,
FTP, HTTP and HTTPS, and instant messaging (IM).
Administrators can identify what data is being used, where
it is being transmitted, and by whom from a centralized
management and reporting console.
Websense has the only data loss prevention solution that
includes a robust data analysis engine that integrates with
directory services and Web intelligence solutions to provide
in-depth reporting of users, groups, and destinations. It
includes intelligent protocol discovery to detect protocol
communications regardless of port, and automatically
categorizes incidents by type, regulation, and severity to
provide valuable insight into regulatory compliance and
corporate governance incidents. Powerful forensics and
distributed analysis technology allow sharing of remediation
tasks across large, decentralized organizations for better
efficiency, while core policy decisions are administered
centrally.
(click
to enlarge) |
Websense Data Security Suite offers a
customizable, Web-based management interface
that includes role-based administration and
control, as well as powerful workflow management
and automated reporting. |
(click
to enlarge) |
Websense Data Security Suite includes a
policy wizard and over 250 pre-defined policies
for out-of-the box monitoring and enforcement. |
Data Protect:
|
Automated policy enforcement (includes Data Monitor)
- Visibility into confidential communications
- Compliance and governance auditing
- Measure and mitigate risk
|
Websense Data Protect includes Websense Data Monitor, and
provides built-in, automated policy enforcement to secure
who and what go where and how. It is the only data loss
prevention solution with native enforcement for in-line
protection of SMTP and HTTP traffic, as well as integration
for other protocols.
Websense Data Protect provides automated policy controls
with real-time reporting. With Websense Data Protect,
organizations can employ such enforcement actions as
blocking, quarantining, forced encryption, and notification,
in addition to a powerful set of incident management tools
to prevent data leakage, improve business processes, and
manage compliance and risk.
- Visibility and control of communications
containing confidential data
- Compliance and governance auditing and policy
controls
- Measure and mitigate the risk of data loss
Websense Data Security Suite can protect data while in
use or in motion with pre-defined, automated policy-based
enforcement controls. User and content-based policies can be
defined to automatically block, encrypt, quarantine, notify,
and remediate potential security breaches.
Websense Data Security Suite is the only solution with
native enforcement for in-line protection of SMTP and HTTP
traffic. It provides the tools to protect data in line with
existing business processes. Policies can be set to enforce
data security controls automatically. This means that
Websense Data Security Suite can automatically request
encryption from data users; require that information owners
authorize the use of their data; or require the IT manager
to review requests. Using Websense Deep Content Control
technology, administrators achieve greater enforcement
accuracy, spend less time evaluating false positives and
negatives, and gain more granular policy management
capabilities. They are able to administer controls by user,
content, destination, and communication channel to enforce
regulatory and corporate governance policies.
Websense has the only DLP solution that provides
decision-ready destination awareness and control. Websense
Data Security Suite integrates with Web intelligence
solutions to set policies for the content destination. For
example, an administrator can block all communication of
confidential information to a spyware site, chat board,
and/or Web mail site with a single click of a pre-defined
category, but still allow users to access the same site for
legitimate purposes. The administrator can also create
custom black lists, white lists, and designate destination
policies by specific users and/or information. Websense Data
Security Suite gives organizations a proactive data
protection solution with easy-to-use, flexible configuration
options that align data security needs with relevant
business requirements.
Data Security for the Endpoint:
|
Comprehensive data loss prevention at the endpoint
- Visibility into confidential communications
- Compliance and governance auditing
- Measure and mitigate risk
|
Websense Data Endpoint provides data loss prevention at
the endpoint, with the ability to discover, monitor, and
protect confidential data whether the user is on or off the
network. It includes fingerprinting and over 600 policy
templates for accurate data identification, and can prevent
the loss of data through such channels as USB devices, local
printing, IM, and for such actions as copy and paste, print
screen, and more.
- Comprehensive data loss prevention at the endpoint, on or off the network
- Visibility and control of data at the endpoint
- Compliance and governance auditing and policy controls
- Measure and mitigate the risk of data loss
|
|
|
