190 likes | 369 Views
FTP/WatchDog. Real-time monitoring of FTP server activityMonitors Open Systems FTP (Windows, UNIX, Linux, etc.)Consolidates FTP activity on multiple FTP servers into a single viewEnables real-time escalation of exceptionsExtends automation efforts to include FTP usageFacilitates comprehensive F
E N D
1. 4/12/2012 Software Assist Corporation 1
2. FTP/WatchDog Real-time monitoring of FTP server activity
Monitors Open Systems FTP (Windows, UNIX, Linux, etc.)
Consolidates FTP activity on multiple FTP servers into a single view
Enables real-time escalation of exceptions
Extends automation efforts to include FTP usage
Facilitates comprehensive FTP usage auditing in seconds
Provides unparalled visibility into what data is moving in and out of the organization through FTP 4/12/2012 Software Assist Corporation 2
3. 4/12/2012 Software Assist Corporation 3 Why Monitor Real-Time? Address the entire FTP exposure
Escalate FTP delivery problems
Enhance security
Improve process automation
Centralize monitoring and analysis
Protect sensitive data
Manage by exception
Boost operational excellence
Save Money
4. 4/12/2012 Software Assist Corporation 4 Visibility into Sensitive Data Transmissions
5. 4/12/2012 Software Assist Corporation 5 Visibility into Sensitive Data Transmissions
6. 4/12/2012 Software Assist Corporation 6 Visibility into Sensitive Data Transmissions
7. 4/12/2012 Software Assist Corporation 7 Visibility into FTP Server Accessibility
8. 4/12/2012 Software Assist Corporation 8 Visibility into User Access to FTP
9. 4/12/2012 Software Assist Corporation 9 Manage FTP Usage by Exception
10. 4/12/2012 Software Assist Corporation 10 Visibility into Failed FTP Activity
11. 4/12/2012 Software Assist Corporation 11 FTP Exposure Auditors are looking at FTP
Exposes companies to data breach
Unsecured data transmission
Transmission of sensitive data not monitored
Logging of FTP activity inconsistent
FTP usage not regularly audited
Shared User ID usage
Anonymous FTP
Policies not enforced (no audit)
Due diligence
12. 4/12/2012 Software Assist Corporation 12 Texas Woman’s University The personal information of about 15,000 TWU students was exposed to potential identity theft (names, addresses and SSNs)
IRS Tuition Statement data transmitted to an outside vendor via a non-secure connection.
Wide news coverage
TWU officials say there is no indication at this time that this data has been accessed or used by anyone
“The university recognizes the seriousness of this exposure and the need to inform the affected students as quickly as possible”
13. 4/12/2012 Software Assist Corporation 13 Brand Name Exposed Acxiom hacked (Aug ‘03)
Through one FTP server outside the firewall
Bank of America tapes lost (Feb ‘05)
Credit card records of 1.2 million federal employees, including 60 U.S. senators
ChoicePoint hacked (Feb ’05)
Thieves stole information on 145,000 people
DSW hacked (Mar ’05)
Credit card data breached compromising information on 1.4 million people
ABN Amro tapes lost (Dec ’05)
With sensitive data on 2,000,000 customers (later found after the damage was done)
Marriott Timeshare tapes lost (Dec ’05)
With credit card and SSN info on 206,000 clients
Ameriprise Laptop Stolen (Jan 2006)
With SSN info on 226,000 customers and financial advisors
American International Group Breach (June ’06)
Personal information of approximately 970,000 potential customers breached
14. 4/12/2012 Software Assist Corporation 14 Consumer Rights Privacy Group Privacy Rights Clearinghouse
Tracks all publicly announced data breaches (since February, 2005)
http://www.privacyrights.org/ar/ChronDataBreaches.htm
Shows data breaches of over 100 million people’s sensitive financial and health data
15. 4/12/2012 Software Assist Corporation 15 FTP Compliance Log FTP usage on all platforms
Maintain accessible, historical FTP usage logs
Perform regular end-to-end audits of FTP usage
Monitor transmission of sensitive data
Manage FTP by exception
Implement secured FTP
Secured options on FTP server
Managed File Transfer solution
Maintain controls to ensure accountability
Eliminate shared User IDs when possible
Track changes to FTP environment
FTP settings and options
Regular review of data accessible to FTP
16. 4/12/2012 Software Assist Corporation 16 Real-Time Monitoring & Automation Real-time collection of enterprise-wide FTP activity
Real-Time Monitor manages data collection process
Agents on distributed platforms
Accumulate in SQL database History File
Alerts
Sensitive Data
Failed FTP Transactions
User-Defined Alerts
Select by characteristics of FTP Transaction
Alerts via email
Automation
Alerts and exceptions interface with automation efforts
17. 4/12/2012 Software Assist Corporation 17
18. FTP Analysis 4/12/2012 Software Assist Corporation 18
19. 4/12/2012 Software Assist Corporation 19 Why Others Have Chosen Our FTP Analysis Concerns over unsecured FTP transmission of sensitive data
Compliance rules dictated by HIPPA and SOX, make it mandatory to know exactly where FTP data is going to and coming from
Auditors are asking questions they can’t answer easily
Long-running FTP transmissions are impacting service levels
Uneasy with how little information they have about FTP usage in their enterprise
Unexplained FTP bottlenecks are becoming a problem
Help desks are fielding more questions about FTPs and have trouble answering them
20. 4/12/2012 Software Assist Corporation 20 Next Steps FTP Analysis
Find out if FTP is a problem
Evaluate Compliance Level
Web Presentation of Findings
Product Trial
Automated installation
1 hour installation and configuration time
License