Cisco IronPort data-loss prevention: beta testers share insights

Cisco customers using DLP to protect intellectual property, spreadsheets

Beta testers of a data-loss prevention add-on to Cisco's IronPort security appliances say DLP is looking like a fine complement to existing anti-virus and anti-spam filtering capabilities.

"We turned on the full range of filters to put it through its paces," says Simon Rainey, principal Internet consultant for RM Education, the United Kingdom's largest supplier of information technology products and services to schools there. While he says there have been a few false positives, the beta test, into its sixth week, has been largely successful.

The Oxford, England firm wants to see how well IronPort with DLP (based on RSA technology) will detect content related to intellectual property, credit cards and financial information. RM Education now has its IronPort gateway, which it has been using for two years, monitoring for unauthorized transmission between employees and business partners.

He says there is a process of "tuning" the DLP filters to monitor and block specific types of material between employees at RM Education and business partners. Some people, for instance, are allowed to send and/or receive CAD or Microsoft Project files, whereas others aren't.

That DLP control is typically configured based on an e-mail address or a domain name. The process undertaken so far with DLP at RM Education is to notify the business line manager of possible content-transmission violations.

Another DLP tester

Another IronPort DLP beta-tester, Dublin, Ireland-based financial-services firm EBS Building Society, has used IronPort gear for about 18 months for e-mail security. While the DLP option includes pre-defined categories of content to watch for, EBS is testing the DLP add-on to protect information of particular importance to its 400,000 customers and 100 offices."Regulatory compliance is important for us, so we're looking at [Payment Card Industry] data automatically. We're also watching for suspicious transmission of spreadsheets," says David Cahill, information security officer at EBS.

Some types of data should not be sent out unless it's encrypted, so in this DLP evaluation period, EBS is quarantining e-mail and sending a notification to the sender about the policy violation.Cahill says the company is intercepting certain material but that there is relatively little of it and it's usually sent accidentally. "It's my job to make sure people are aware of the security requirements. The system is giving us the capability to enforce those rules," he says.

Both Rainey and Cahill regard DLP filtering at the e-mail gateway as a fairly low-cost and simple way to get started with DLP in their organizations. (While the official product release is yet to come, Cisco earlier this year spoke of about $10 per user as a price point for IronPort DLP). Full-fledged DLP systems, which encompass desktops and gateways, are still expensive, starting in the six figures.

Desktop DLP at this point would be a "huge initiative," says Cahill, and it would be hard to get management buy-in for an enterprise-wide deployment.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags DLPciscoironport

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ellen Messmer

Network World
Show Comments

Essentials

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?