EdgeWave Data Loss Protection

Overview:

Our DLP feature gives you the powerful tools you need to comply with government regulations and prevent the loss of sensitive private data.

EdgeWave Email Security includes a content analysis and policy engine that uses proprietary technology to protect private information transmitted via outgoing email. As part of EdgeWave's Secure Content Management portfolio, this data protection technology analyzes data being sent out of your network to detect private content in data in motion and prevent sensitive and protected data from leaving your network. EdgeWave DLP gives you the powerful tools you need to comply with government regulations, such as HIPAA and GLBA, and prevents the loss of all types of private data, including, patient healthcare information, financial information and social security and credit card numbers.

Easy Deployment

EdgeWave DLP is easily managed from the central dashboard and can be provisioned within hours to start protecting your organization. With technology that delivers unrivalled accuracy while assuring low latency, you can add a layer of protection to your security strategy without adversely affecting the delivery of your legitimate email.

Proprietary Technology

The DLP feature can be enabled in the EdgeWave Email Security solution whether you are using the hosted solution or have an EdgeWave appliance installed at the edge of your network to monitor all outbound SMTP traffic. Our built-in content analysis detects and prevents critical private data from being sent out of your network, allowing you to comply with regulatory legislation and defend against email-borne threats.

Features:

Proprietary Algorithms, Pattern Matching Technology
This DLP Service can be enabled in the EdgeWave Email Security solution whether you are using the hosted solution or have an appliance installed at the edge of your network to monitor all outbound SMTP traffic. In this configuration, EdgeWave DLP can perform the following:

• Initial Detection: DLP analyzes the content of data in motion to identify any sensitive data, such as private health or financial information, leaving the network.
• Define & Enforce: You can specify what action to take when a content analysis violation is found: deliver to recipient, hold in quarantine for review, or block.
• Content Analysis: Performs deep packet inspection in data and files being transferred on your network to analyze the content of reassembled network packets and identify private information that may be leaving your network. Content analysis is performed across numerous file types.

EdgeWave built-in content analysis helps you comply with regulatory legislation and defend against: Exposure of personal healthcare information

• Capture of financial information
• Credit Card Matching
• Social Security Number Matching

Benefits

• Easy To Deploy
• Unprecedented Accuracy – Lexicons and logic engine allows precise deterministic analysis
• Low Latency – Proprietary technology rapidly analyzes and detects data triggering compliance enforcement

Implementation Is Easy
Just route your SMTP email to the EdgeWave Email Security solution and configure the policies for DLP. The EdgeWave solution then analyzes the email leaving your organization for violations of any content analysis types that are enabled. You can also specify what action to take when a content analysis violation is found: hold in quarantine until further review or block. You may define rules that apply to all users or only to specified sender email addresses or content analysis types.

Credit Card Matching
Major credit card companies use standard numbering sequences that are unique to each brand of card, such as Visa, MasterCard, or Discover. EdgeWave DLP catches any credit card numbers that might be leaving your organization with matching technology that recognizes the identifiable patterns of numbers all major credit card companies use. In addition, we employ the LUHN algorithm to validate the number, which virtually eliminates the possibility that messages will be incorrectly identified as policy violations.

Social Security Numbers
EdgeWave DLP has a built-in extended regular expression that identifies U. S. Social Security numbers contained in data and files being transferred from your network. With identity theft still a critical, global problem, keeping this information from leaving your organization is vitally important.

File Types Analyzed
In addition to the features mentioned, EdgeWave DLP analyzes many other types of files for private content.

Personal Healthcare and Financial Information
A lexicon is an xml file that contains a list of specialized vocabulary and phrases unique to a specific subject. EdgeWave DLP includes built-in lexicons for the financial and healthcare industries that prevent accidental or malicious exposure of personal health or financial information – a critical factor in complying with regulatory requirements. Our solution uses these and other lexicons to examine the contents of data and files, identifying specific words and phrases unique to the financial and healthcare industries. This feature also requires a match on information that would identify the person, helping prevent false positives. For example, if the phrase "broken tibia" is matched, information that would identify the person involved must also be matched, such as "client John Doe" or "patient number 0123456".

Personal health information (PHI) is protected by the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule enacted in 1996. Protection of personal financial information is required by the Gramm-Leach-Bliley Act (GLBA) enacted by the U.S. Congress in 1999.

Objectionable Content
The DLP Service can be configured to filter out profanity using a common American English profanity lexicon.

File Types:

EdgeWave Email Data Compliance analyzes many other types of files for private content. The following table lists the file types that are analyzed. Metadata, text, and character sets are extracted for all types, except those marked with an asterisk (*). For these file types, only metadata (title, subject, author, etc.) is extracted.

Format/Version/Extension

FAQs:

Our DLP feature gives you the powerful tools you need to comply with government regulations and prevent the loss of sensitive private data.

Many organizations handle increasing amounts of confidential data on a daily basis. However the technologies that make this data easy to access and share also increase the risk of unauthorized disclosure and loss of sensitive, protected data. This has potentially serious consequences, including financial penalties, customer dissatisfaction and increased regulatory scrutiny that can cause significant damage to your business and brand reputation.

Q. What is Data Loss Protection (DLP)?
A: DLP, part of EdgeWave Email Security is an automatic surveillance system that consistently watches computer activity on your outgoing email (SMTP) traffic being generated by servers, desktop and laptop computers. EdgeWave DLP protects confidential data by identifying and securing it to prevent security policy violations and maintain regulatory compliance. EdgeWave DLP gives you the powerful tools you need to comply with government and industry regulations, such as SOX, FINRA, PCI DSS, HIPAA/HITECH and GLBA.

Q. What kind of data does DLP monitor?
A: DLP monitors and prevents the loss of all types of private data, including:

• Patient healthcare information
• Financial information
• Social Security Numbers
• Credit Card Numbers
• Profanity (Optional)

Q. What will happen if DLP detects confidential information?
A: When DLP detects confidential data, it automatically categorizes the message and related content so action can be taken. You can configure EdgeWave DLP to block, quarantine and send notifications, markup or allow delivery. You can also configure the Advanced Reporting tool to send daily reports of such activity.

Q. Will my email be blocked?
A: In most deployments, DLP is configured to block or quarantine any outgoing message containing confidential information.

Q. What if I am sending confidential information for legitimate business purposes and it is blocked by the DLP?
A: If you are sending a legitimate email that happens to contain confidential information and it is blocked, you must contact your IT Administrator to resolve the issue.

Q. Will DLP slow down the performance of the network or my computer?
A: DLP should not significantly impact or slow down the distribution of your email.

Q. What files types are supported by the full attachment scanning feature?
A: For a full list of file types supported, please refer to our data sheet

Q. How do I add DLP to my EdgeWave Email Security solution? A: DLP is a premium feature. To add it to your new or existing EdgeWave Email Security purchase, please speak with your EdgeWave Representative.

Documentation:

Download the EdgeWave Data Loss Protection Data Sheet (PDF).

Download the EdgeWave DLP File Types Data Sheet (PDF).