Reconnex Announces New Release of iGuard Content Monitoring Appliances


MOUNTAIN VIEW, Calif., Nov. 14 -- Reconnex, the expert in enterprise risk discovery and management systems, today announced a powerful new software release for its iGuard content-monitoring appliances. Reconnex's iGuard is the only content-based security appliance on the market that performs real-time content analysis at network speeds, monitoring all traffic flowing over a network, regardless of file type or communication channel. The iGuard enables organizations to, for the first time, receive a complete view of enterprise risk and determine how well corporate security policies are implemented.

The new release of the Reconnex iGuard appliance software responds to enterprise customer requests by enabling role-based user and group accounts, allowing multiple users access to the system with restricted controls both into the functions of the system as well as the data based on their role in the enterprise. The new release also features a redesigned graphical user interface (GUI) with in-depth dashboard reporting and text highlighting, providing users both macro-level trend analysis as well as a micro-level view of all security incidents. Increased match count and thresholds provide the ability to reduce false positives and improve accuracy by setting thresholds on searches. Geographical location resolution resolves source and destination addresses to specific geographical locations. Finally, the new release expands options for discovering and correlating events: real-time, in the data path; through a rolling or continuous window of data collection set by customer for ad hoc corroboration efforts; and after-the-fact analysis of data at rest. The new release will begin shipping in all iGuard appliances immediately, and existing iGuard customers can upgrade their iGuards at no charge.

"Maimonides Medical Center has a reputation for excellence, and to keep it, we have to safeguard patient information and make sure we comply with policies and procedures such as the Health Insurance Portability and Accountability Act (HIPAA)," said Mark Moroses, senior director of technical services at Maimonides Medical Center. "The Reconnex iGuard lets us pro- actively verify if employees are in compliance and do awareness training to prevent future infractions. We've also been able to find and correct misconfigurations in network devices that caused security problems. By making our network more secure, Reconnex's iGuard helps Maimonides avoid potentially costly penalties for non-compliance with regulations. This new iGuard release promises to give us even greater insight into and control over network security."

Role-Based Multi-User Access Involves More Departments in Security

Electronic risk management (ERM) and network content monitoring in general are the responsibility not just of the IT department but of the legal department, the executive staff, in-house security experts, the human resources department, and others. The legal department, for example, may need to know if intellectual property is leaving the network, while compliance officers may want to ensure that network users are not transmitting sensitive information such as social security numbers in clear text.

The new release of Reconnex's iGuard software enables network administrators to grant user as well as group-level permissions to the iGuard based on the role they play in the organization. Permissions can be granted both at the functional level, granting and restricting capabilities such as creating, editing and deleting policies or viewing results, as well as at a policy and rule level, where users and groups may be restricted to view only those policies that pertain to their business unit. Role-based access control enforces the ability to create virtual views based on various responsibilities of the system.

"The new software release ties the iGuard appliances even more tightly to corporate policies and procedures and makes it easier for all enterprise constituents to manage content according to their own charter in the organization," said Kevin Cheek, vice president of marketing at Reconnex. "We have performed more than 100 48-Hour e-Risk Rapid Assessments and have received tremendous feedback about ways to bring risk management to a new level, and add more value to existing perimeter security. Now we can maintain the right silos of privacy within the organization, while giving every stakeholder a better view of its respective domain."

Greater Visibility Improves Risk Management

The iGuard's new graphical interface with dashboard reporting provides both macro-level trend analyses for corporate executives and a micro-level view of all violations of security policy. The network administrator can tailor dashboards to the needs of specific users through permission settings. These dashboards complement Reconnex's four e-Risk Module (ERM) policy engines -- Corporate Governance, Compliance, Critical Infrastructure Security, and Competitive Advantage -- which have pre-defined rule sets that enable organizations to comply with federal and state regulations, retain a competitive advantage by providing security for intellectual property and trade secrets, provide monitoring for appropriate governance, and ensure that critical information remains secure.

A new text-highlighting function extracts and highlights the exact text or pattern that triggered a policy violation, enabling users to review the text at a glance and quickly determine if the incident is a false positive or a true positive that should be reviewed. Further, users are given the ability to set thresholds on searches relative to the number of instances a particular rule triggered on content, allowing users to reduce the number of false positives and navigate more rapidly to the incidents of highest importance.

The new iGuard software further enhances search capabilities via its ability to resolve all IP addresses to hostnames as well as known/registered geographical locations and countries. Users can more effectively construct searches and view results relative to where the information flow is being sent to and coming from. In the future, the Reconnex appliance will offer continued support of this feature at the organizational level, providing an easy mechanism to search and view data between the network and various outside organizations. Users will be able to filter and monitor data to and from other organizations, enabling a company to find out, for example, if any of its Intellectual Property is going to its competitors.

Temporary Storage, Indexing, Help Find Patterns in Security Violations

The new software release also provides users with more options for evaluating threats, whether in real time, over a preset time period, or on data at rest. To solve the threats of peer-to-peer file sharing, for instance, enterprises need an automatic and dynamic way to analyze data over a period of time. The iGuard includes 1.5 Tb of temporary storage that enables users to store data in a dynamic rolling window for a pre-determined amount of time. For example, if an enterprise decides to store captured data for 1 week, 30 or 60 days, data from day one is deleted at the end of that cycle and the new day's data is added to storage. Users can also transfer event information to third party permanent storage for archival purposes at the end of the time period if they wish.

This temporary data storage, together with an engine that indexes the stored data, enables users to do ad hoc queries over specified time periods to find things such as patterns of security breaches, both internal and external, and the extent of their potential damage. Often, this capability allows users to provide context associated with incidents that have triggered on policies, answering when and how the breaches occurred. In addition, this enforces that users do not always need to know exactly what they are looking for at the time that traffic is being captured, users who become suspicious of a transmission happening in real time can search to find out if that person or location is associated with any other suspicious activity. No other content monitoring vendor has this capability, as competing solutions only store data that matches their pre-defined filters, which limits their ability to monitor for unknown risks and establish context for data leaks.

The new software also enables iGuard appliances to output incident violation search results to third-party external applications, including Security Information Management (SIM) devices for central management of iGuard and other device alerts.

Price and Availability
The new iGuard software release is available now. Existing Reconnex iGuard customers can upgrade at no additional charge.

About Reconnex
Reconnex is the leading provider of enterprise risk management (ERM) systems that reveal and address the insider threat to compliance risks, competitive risks, corporate governance risks and critical infrastructure risks. Reconnex enables Fortune 1000 companies, government organizations, and smaller healthcare and financial services companies to protect their brands, shareholder value and mission critical operations by revealing hidden risks in the first 48 hours of deployment. Without exception, every deployment has enabled these organizations to quickly remediate the risks that could have damaged or destroyed their organization.

Give us two days, you'll know(TM). Call Reconnex today at 1-866-940-4590 or visit us on the web at reconnex.net.

CONTACT: Kevin Cheek of Reconnex Corporation, +1-650-940-7705 or kcheek@reconnex.net;

All Topics