Check-Point-DLP-Customer-SC.ppt

Click to edit Master title style,*,First Level,Second level,Third level,Fourth level,*,2010 Check Point Software Technologies Ltd.|Unrestricted For everyone|,Check Point,如何让防数据泄密工作,April 22,2010,Check Point DLP,Makes data loss prevention work,议程,1,什么是数据泄露,?,2,DLP,的关键挑战,3,Check Point DLP,介绍,4,总结,数据防泄漏,什么是,DLP?,John.Stevens,Corporate Strategy,Green World Strategy Plan 2010,E-mail,发送给错误的收件人，故意的或错误的？,数据泄露发生在我们所有人身上,公司文档被上传到外部网站,数据破坏,案例提要,品牌受损,履约责任,高额罚款,它不只是关于合规,首席合规官,首席安全官,遵从,用户数据,企业数据,患者资料,安全,知识产权,战略规划,内部数据,Check Point,推动,DLP,运转,John.Stevens,Corporate Strategy,John,Lets review the corporate strategy in our morning meeting.,Green World Strategy Plan 2010,John,John.Stevens,机密数据发送给错误的收件人,!,Data Loss Prevention Alert,An email that you have just sent has been quarantined.,Reason:attached document contains confidential internal data,The message is being held until further action.,Send,Discard,or,Review Issue,提示用户采取行动,用户纠正,John,Lets review the corporate strategy in our morning meeting.,Green World Strategy Plan 2010,John.Stevens,Corporate Strategy,Data Loss Prevention Alert,An email that you have just sent has been quarantined.,Reason:attached document contains confidential internal data,The message is being held until further action.,Send,Discard,or,Review Issue,Check Point Data Loss Prevention,介绍,教育,对企业用户的数据政策,强制,数据泄露的业务流程,预防,从检测到预防,Check Point,结合技术和流程来推动,DLP,运转,NEW!,Check Point,解决了,DLP,的挑战,技术面临的挑战,使用户能够实时的补救事件,IT,工作人员面临的挑战,非工作人员的政策学习,新的,UserCheck,技术,Check Point DLP,是如何工作的,?,简单的基于规则的策略管理,MultiSpect,检测引擎,全网施行,Data Loss Prevention Alert,An email that you have just sent has been quarantined.,Reason:attached document contains confidential internal data,The message is being held until further action.,Send,Discard,or,Review Issue,2.,用户告警,1.,发送邮件或上传文件,3.,用户纠正,UserCheck,提供用户纠正行为,非破坏性的,实时的,教育性的,Item No.,Name,Social Security Number,Job Title,Gross Pay,1,John Smith,987-65-4320,CEO,$200,000,2,Kevin Brian,987-65-4221,VP R&D,$150,000,3,Margret White,769-65-7522,VP Marketing,$153,000,4,Bob Johns,342-62-3323,CFO,$140,000,5,Mike Riddle,777-43-4324,COO,$180,000,多个数据源相关联的数据使用开放语言,新的,MultiSpect,技术,MultiSpect,检测引擎,侦测超过种文件格式,600+File Formats,250+,数据类型,超过种预定义的数据类型,检测和识别私有格式和模板,简单的基于规则的策略管理,轻松定义策略来检测，阻止或询问用户,统一控制和部署,集中管理,对于整个安全基础设施的统一控制,Data Loss Prevention,易于部署,专用设备,软刀片,基于网络的嵌入式解决方案,在现有的网关或者服务器上,在部署后一天启动并运行,DLP-1,Check Point DLP,一览,从检测到预防,基于网络的嵌入式软刀片可以跑任何现有的,Check Point,网关上,UserCheck,通告或者返回电子邮件给用户,主动阻挡有意和无意的数据泄露,Check Point DLP,运作,阻止,WEB,上传私密信息,要求用户确认和改正违规行为,通过策略过滤不合规的机密信息通信,方案,1:,预防,方案,3:,警告,询问和教育,方案,2:,强制,Jenn,jsimmons,Code subroutine to work on from home,数据防泄漏先发制人,Web,上传私密信息,软件开发人员,开发人员从家里把源代码上传到文件共享站点,通过共享把文件发布到主机站点上,Check Point DLP,阻止上传 并通告用户,公司副总裁发送了一份并购合同给律师,基于企业数据政策的过滤规则,政策例外允许预设的电子邮件收件人,企业战略副总裁,jcraicg,M&A letter of intent for review,ProjectAtlantisLoI.pdf,Hi James,We have revised the terms of the acquisition.Attached is the Letter of Intent for your review.,Thanks,David,警告用户的数据策略,Preliminary Financial Statement,mattg,警告,询问和教育用户,Check Point,促使用户补救,DLP,财务总监,Greg.Smith,Preliminary Financial Statement,Preliminary_financials.pdf,Greg,Sending you the Q1 preliminary financials for audit.,Thanks,Matt Gerhart,Chief Financial Officer,ACME Corp.,mattg,公司,CFO,发送预算报表给外部审计师,Check Point Data Loss Prevention,Reconsider,sending,this email(Prelimi,Fri 4/2/2010 3:45 PM,Rachel Greene,PCI Audit Status,Fri 4/2/2010 1:23 PM,Tom Peters,Sales Planning Meeting,Thu 3/2/2010 9:45 AM,mattg,Reconsider sending this email(Preli,Preliminary Financial Statement,The attached message,sent by you,is addressed to an external email address.The Check Point Data Loss Prevention System determined that it,may contain confidential information.,Emails attachment,Preliminary_financials.pdf,appears to contain financial records.The message is being held until further action.,Send,Discard,or,Review Issue,询问问用户确认对敏感数据的发送,Hi,This information is OK to send to our outside auditor.,Thanks,Matt,用户解释，并要求发送,使您的业务流程一致化,例如,超过行的电子表格,超出个财务规定,密件抄送给外部收件人,公司名称超过次,亵渎的言词,适应您的流程和环境,可疑通信,确定非传统业务的通讯行为,DLP-1,设备规格,DLP-1 2571,DLP-1 9571,性能,用户数,1,000,5,000,信息量,/,小时,70K,350K,吞吐量,700 Mbps,2.5 Gbps,规格,存储,500 GB,2 x 1 TB(,RAID 1,),网络接口,6 Copper 1GbE,10 Copper 1GbE,可选,Bypass card,4,口,-2 segments,(,预先安装,),4 ports-2 segments,(,附件订购,),价格,年价格,不含,bypass card-$14,990,含,bypass card-$15,990,$49,990,加,bypass card-$4,995,年度价格（）,$7,000,$12,000,Check Point DLP,软刀片,CPSB-DLP-500,CPSB-DLP-1500,CPSB-DLP-U,建议用户数,(,取决于配置,)*,500,500-1,500,1,500+,信息量,/,小时,5,000-15,000,15,000-50,000,50,000-250,000,最大吞吐量,700 Mbps,1.5 Gbps,2.5 Gbps,年度价格3,000,$7,000,$12,000,DLP-1 9571,设备,配件,Model,Price,现场可更换,4-Port,Copper,Bypass Card(DLP-1 9571,PWR-1 907x,IPS-1),$4,995,Check Point,更换零件套件包括一个硬盘驱动器,一个电源,和,一个散热器,(DLP-1 9571),$3,900,Check Point Lights-Out-Management card(DLP-1 9571,PWR-1 907x,IPS-1),$2,500,Check Point DLP,总结,Check Point,结合技术和流程,推动,DLP,防止数据泄露,从检测到预防,强制数据政策,在整个网络,教育和警告用户,非工作人员,谢谢,!,