Get a grip on communications slips
Code Green, InBoxer, MessageGate, and Palisade compete to prevent costly data loss
Other dashboard functions let me generate custom alerts and reports, display graphs of incident trends, and see risk metrics. Although the CI-1500 lacks some the sophisticated report functions found in its competitors (generating and e-mailing reports on schedules, for instance), what it offers is still above the norm.
Similarly, on the forensic side, reviewers can view the audit history of incidents and sort them by different criteria to help spot patterns. That said, the CI-1500 doesn't retain information about all communications it monitors, so it's not perfect if you need to go back and see messages that might have been missed.
Code Green Networks offers multiple reasons for its high score, including registering confidential structured and unstructured data, audit reports and forensic analysis, negligible impact on network performance, and easy administration.
Many data leak products start to look similar in features and operation, but InBoxer has some truly unique differences that make it a superior investigation tool. Foremost, it archives every e-mail message (including attachments), which are immediately indexed for later searches. Besides working with Microsoft Exchange, InBoxer was just qualified for IBM Lotus Domino.
Second, InBoxer scores each message on a scale of 1 to 100 for inappropriate content, privacy violations, and other metrics.
Click for larger view.
I had the Anti-Risk Appliance set up in 30 minutes, which is a credit to the system's language analysis. Rather than spending time setting up policies, InBoxer automatically applies language modeling techniques (originally developed for speech recognition) to determine if a message requires action. Used in combination with the predefined categories, this solution found all the problems in my test messages, including privacy violations (credit card numbers), medical technology (for HIPAA compliance), offensive content (adult content and profanity), and confidential documents.
For absolute precision, InBoxer provides a commonplace feature where you can specify (through the Web interface) match lists. Here, I entered files of exact customer numbers and patient identifiers. I also specified regular expressions (for finding text that matched particular patterns), which was helpful in spotting unusual bank account number formatting.
The system will also examine attachments, such as word processing documents and spreadsheets (and it peers inside of compressed ZIP files). However, it doesn't handle encrypted communications or files -- and it can't crawl file shares or databases to register content.