Get a grip on communications slips
Code Green, InBoxer, MessageGate, and Palisade compete to prevent costly data loss
Click for larger view.
Although there are potentially several applications to install, my experience indicates MessageGate can be running in a day and generating assessment reports. Here you get a high-level view of e-mail activities, such as who sends the most messages and what type of files are attached.
After reviewing this scorecard, I was off to the Web console creating policies. Although policies can get extremely complex, there's noting involved in using the Policy Builder. Starting with basic routing (inbound, outbound, or internal messages), I quickly layered on criteria, like removing attachments of a certain file format that were not password protected.
I particularly liked the completeness of these actions (16 in total), which range from sending a confirmation notification to the originator and adding a disclaimer to placing the suspect e-mail in a review queue. Another nice touch is Enterprise Email Governance's policy test mode; this feature let me run real messages through a policy to make sure it's working right without actually invoking actions.
The software improves detection accuracy through dictionaries, where you enter specific terms or create regular expressions for, say, matching social security or bank routing numbers. Further, you can register content in text files and have MessageGate refresh this information on set schedule. That said, the system doesn't crawl document libraries, databases, or content repositories.
When I switched MessageGate to live mode, the software acted on my policies exactly as I'd designed them. For example, outbound messages marked as company confidential were rejected, and a note was relayed to the sender explaining what was wrong. In other cases, messages were sent to a queue where risk managers could review the e-mails and decide if they should be released.
I also viewed both real-time and historical charts, such as internal messages by disposition (blocked, notified, reviewed, routed, modified, not archived, and archived). The company also provides MessageGate Activity Profiles (MAPs). These provide a detailed comparison of current e-mail traffic, policies, and e-mail archive content -- which provide a very good picture of any outstanding compliance risks or places where policies and processes could be more efficient.