Friday | 10 July, 2009
CSO
Data loss start-ups sell out
Rapid consolidation could mean 'baked-in' data leakage features will appear in security products from vendors such as Cisco, Symantec, Trend Micro and McAfee
Cara Garretson (Network World) 08/01/2008 09:19:04

Following its acquisition of Onigma late last year, McAfee used that company's products as the basis of its foray into the anti-data leakage market in February. In October, McAfee acquired encryption and access-control vendor SafeBoot, and plans to launch a new data-protection product business unit based on the integration of these technologies, officials say.

WebSense, which acquired anti-data leakage vendor PortAuthority last December and earlier this year bought e-mail security vendor SurfControl, is ahead of the pack in integrating technology from acquired companies into its main product line. In July, WebSense announced it had integrated Port Authority's content protection suite with its ThreatSeeker Web security product, and is currently fusing features from SurfControl's e-mail security technology as well.

"It's the combination of what you know about your employees combined with what you know about malicious activity on the Internet...we're the only company that can set granular policies and enforce them around information protection," says Leo Cole, WebSense's director of marketing.

Cisco, via its IronPort subsidiary, is already putting anti-data leakage features into existing platforms, and is exploring whether it makes sense to also add content scanning to infrastructure offerings.

"Most of the customers we talk to want [anti-data leakage] integrated into their existing platforms," says Tom Gillis, vice president of marketing with IronPort, which Cisco purchased in January. The company in September added anti-data leakage features to its e-mail security appliance, and says there may be opportunities to include variants of these capabilities to Cisco switches and routers as well.

IronPort is focused mainly on protecting data in motion -- because that's the strength of the company's e-mail and Web security appliances -- and believes there's great benefit to being able to do fairly straightforward tasks such as blocking credit-card information from being sent in an unencrypted e-mail.

Others, however, believe the greatest benefit these tools can offer is to help enterprises figure out what and where their sensitive information is.

"Protecting information is a concern for us, our proprietary information is out there in a bunch of different locations, it's tougher to protect it because I don't know how it's going out, where it's going, and trying to locate it all," says one security professional with a high-tech manufacturing company who asked not to be named and uses an anti-data leakage product from Reconnex, one of the few independent companies left in the market. "That's probably the toughest part, to determine exactly what critical data is."

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Additional Resources
Newsletter Subscription
Sign up for our CSO Online newsletters!
RSS Feeds
Syndicate content
 
Whitepaper

Reducing the risk of insider abuse

The potential for insider abuse can never be eliminated completely, but the steps outlined in this white paper can reduce the potential for such abuse. Read on to ensure no one person can alter your operations to their personal advantage or to the detriment of your organisation.

Sponsored Links