Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vontu Protect Monitors Data Departures

I configured a single port on a Cisco Systems Catalyst 6500 switch to monitor the lab's primary VLAN and connected the Vontu monitor machine. I deployed the administrative console, called Vontu Protect Manager, on a Microsoft Windows 2003 server with dual processors. The manager communicates with the monitor via a 128-bit AES-encrypted IPsec tunnel. Vontu Protect uses Tomcat for its Web management console, and pricing for the package includes the cost of Windows 2003 Server.

The monitor captures traffic and then passes it back to the manager for analysis and storage in its embedded Oracle database. Although the monitor tracks only HTTP, SMTP and FTP traffic, future versions of the product will be able to monitor native IM, P2P, telnet, IMAP and POP3 traffic, according to company officials.

Vontu Protect ships with default templates for several statutes, including HIPAA (Health Insurance Portability and Accountability Act), The Patriot Act and those regulations that are part of OFAC (Office of Foreign Asset Control). In addition, you can build templates to scan for a variety of information and even perform keyword-based filtering.


Good
  • Detection method reduces false positives
  • Helps secure access to sensitive data

  • Bad

  • Doesn't stop confidential data from leaving the network
  • Doesn't stop malicious exchange of corporate data
    • 1