Solution Brief: Blue Coat DLP

The Blue Coat DLP Solution: Complete. Quickly Deployed. Easy to Manage.
The loss of sensitive information – by accident or by design – is a persistent concern for IT managers today. Detecting and eliminating potential data leaks is critical, and Blue Coat Data Loss Prevention (DLP) gives you a running start. A typical installation takes less than a day. You can immediately automate compliance and mitigate risks from internal breaches across any electronic communication channel – from email to the Web. Even SSL traffic is inspected and controlled at the gateway.

The Content Security Challenge
When confidential information is leaked, the effect can be devastating: loss of revenue, financial penalties, and irreparable damage to your organization’s image, brand and customer loyalty. Government regulations and guidelines require businesses to rigorously monitor confidential information and report leaks. The resulting news reports frequently reveal unauthorized use of sensitive data, substantial corporate losses, and a direct effect on consumers. The clear challenge is to protect customer data and safeguard intellectual property against internal mishandling – malicious or accidental. There are many data loss prevention solutions, but they tend to share negative characteristics: Pieces from multiple vendors complicate acquisition. A full DLP solution may take months to implement. Conflicting policies and rules can make operation challenging. Solutions tend to scale poorly, with limited integration.

How the Blue Coat Solution Works
Blue Coat DLP accurately identifies sensitive data to detect potential access, storage, or transmission policy violations at all possible leak points: Web DLP: Blue Coat DLP works with Blue Coat’s ProxySG through the industry-standard Internet Content Adaptation Protocol (ICAP) to inspect outgoing data requests, including encrypted SSL traffic. The appliances detect sensitive content and apply the appropriate DLP policy. Blue Coat DLP instructs ProxySG to allow or block the session. Email DLP: Blue Coat DLP intercepts Simple Mail Transfer Protocol (SMTP) traffic from your email server before it leaves the organization to ensure that it complies with policy. Besides blocking violations, it can put email on hold for approval or redirect it for encryption. Network DLP: Blue Coat DLP monitors network traffic to identify users who access or share sensitive information in an unsafe manner across your network. Discovery DLP: Blue Coat DLP proactively scans network resources such as database, content management, and file servers to identify sensitive information in locations where it may be at risk.

-> -> -> ->

Blue Coat DLP Makes It Simple
Blue Coat DLP is a complete, quickly deployed, contentaware solution that provides protection across all content and all languages. It secures all endpoint devices and protocols on the network and provides discovery. The appliances use proprietary deep-inspection algorithms to deliver real-time comprehensive content monitoring and data loss protection against insider threats and accidental misuse. The solution enables you to: Inspect content flows across multiple protocols Detect unauthorized disclosures Enforce user-defined policies Inspect and block Web-based email and Web 2.0 transactions Encrypt email following corporate policies Avoid costly compliance incidents Protect your organization’s reputation

Web Mail Web 2.0

Sensitive Data

Internet
Social Networking Email Encypted Email

Blue Coat DLP Implementation with ProxySG

-> -> -> -> -> -> ->

Web DLP

Email DLP

ProxySG

DLP

Discovery

Email

Database Content Management

Network DLP

Solution Brief: Blue Coat DLP

Benefits of the Blue Coat DLP Solution
-> Detection Accuracy. Proprietary technology enables Blue Coat DLP to recognize and register a wide variety of both structured data (such as columns in spreadsheets, fields in databases, or content management systems) and unstructured data (source code, PDF files, and document formats such as Microsoft Office). This capability eliminates the high rate of false positives and false negatives that plague other DLP solutions. Blue Coat DLP then instructs ProxySG to allow or block an HTTP or HTTPS session. -> Ease of deployment. The Blue Coat DLP appliance combines content inspection, policy creation and management, and e-mail encryption in a single unit. It greatly simplifies deployment without sacrificing accuracy or effectiveness. Blue Coat ProxySG appliances integrate inbound content filtering with WAN optimization. A typical installation can take less than a day – with zero network impact. -> Ease of Use and Management. Blue Coat DLP gives you centralized configuration, discovery, reporting and management of the joint DLP/ProxySG solution. -> Comprehensive DLP. Blue Coat DLP is content aware. It secures all protocols on the network, secures endpoint devices, and provides discovery. -> Insight into Encrypted/Decrypted Traffic. ProxySG inspects Web and encrypted traffic (SSL); Blue Coat DLP provides outbound inspection to ensure compliance.

Summary
Sensitive information can be leaked from your corporate network if outbound Internet communication channels are not properly controlled. Blue Coat DLP and ProxySG appliances form an integrated solution that stops the loss or theft of proprietary information over all communication channels, including SSL-encrypted sessions. Blue Coat DLP provides enterprise-class data loss prevention solutions that are centralized, comprehensive, and easy to deploy and manage. They help you to address risks and establish management policy by replacing guesswork with tools, roadmaps, and recommendations. They let you deploy a robust approach to securing one of your corporation’s most valuable assets – data.

The Secure Web Gateway
-> -> -> -> -> Layered defenses continue to be the backbone of a complete Web gateway solution. The following products can help you get a Secure Web Gateway solution up and running quickly: Blue Coat ProxySG delivers Web application and content visibility, management and control. You can filter, allow, block, coach users or set bandwidth limits, as well as check true file types and optimize Web media. Blue Coat WebFilter includes the WebPulse cloud ecosystem for a solid front line defense against new and fastspreading threats, as well as botnet and spyware “phone-home” protection. Blue Coat ProxyAV provides inline HTTP, SSL and FTP malware threat detection from more than half of the industry’s leading anti-malware vendors. Integrated Data Loss Prevention (DLP) technologies prevent intentional and accidental loss of sensitive information. Reporter and Director manage the Secure Web Gateway components.

Blue Coat Systems, Inc. www.bluecoat.com Sunnyvale, CA USA // +1.408.220.2200

Corporate Headquarters

EMEA Headquarters

Hampshire, UK // +44.1252.554600

APAC Headquarters

Hong Kong // +852.3476.1000

Copyright © 2010 Blue Coat Systems, Inc. All rights reserved worldwide. No part of this document may be reproduced by any means nor translated to any electronic medium without the written consent of Blue Coat Systems, Inc. Specifications are subject to change without notice. Information contained in this document is believed to be accurate and reliable, however, Blue Coat Systems, Inc. assumes no responsibility for its use. Blue Coat, ProxySG, PacketShaper, CacheFlow, IntelligenceCenter and BlueTouch are registered trademarks of Blue Coat Systems, Inc. in the U.S. and worldwide. All other trademarks mentioned in this document are the property of their respective owners. v.SB_DLP-v1-0710