High accuracy and adaptability. Low complexity and cost.

Websense DLP: the best data solution at the lowest cost.

Data security is getting tougher Rampant regulations, sky-high fines, and ever-evolving attack vectors make data security one tough job. Mobile computing, peripheral devices, and file-sharing software compound the problem.

Let Websense make your job easier. Websense® DLP gives you a smart and affordable way to stay on top of the job. (Keep reading.)



What do you need for data security? (Whatever it is, we've got it.) Websense® data security products offer you the only solution that's comprehensive, cost effective, and without complexity. With Websense, you can:

  • Manage compliance worry-free with built-in regulatory policies
  • Benefit from streamlined deployment and management
  • Enforce business processes with flexible and accurate policy definition tools
  • Take full advantage of web applications without concern about data loss
  • Use Websense Data Discover for network scanning of data repositories to help find confidential data in known locations, classify this data, and initiate remediation, including encryption or file removal

Summary

Features Benefits
Automated real-time enforcement options across network, endpoint, and discovered data repositories
  • Flexible enforcement options, including user notification, audit/log, and more
  • Network traffic: quarantine, block, route to third-party encryption gateway, remove content
  • Endpoint activity: block move/ copy/ print of confidential data from applications to external devices; block screen print, user notification, user confirmation/ audit/ logging
  • Discovery: removal or replacement (using credentials and automated scripts), encryption (third-party integration with Voltage file encryption) of stored data
DLP for Security-as-a-Service (SaaS) applications
  • Help ensure sensitive data is uploaded only to identified and approved SaaS applications
  • Enforce type of information that can be downloaded locally from SaaS applications
Smart Detection capability to detect data loss covering multiple communications
  • Detect small amounts of confidential data sent over multiple communications
  • Detect large volume of data loss from the sum of confidential data sent over specific time period
Visibility into numerous network channels through passive traffic monitoring
  • Network monitoring of web (HTTP), secure web (HTTPS), email (SMTP), IM (AOL, Yahoo, MSN), FTP, printing (optional OCR agent), dynamic web 2.0 content
  • Reduce violations simply by sending notifications to users reminding them of policy
Visibility into device, application, and storage of confidential data on end-user systems
  • Manage data loss risk due to user mobility and misuse of data
  • Location awareness: apply policies on/off network, offline
  • Portability: local fingerprint storage with minimal footprint
  • Device monitoring and control of removable storage, external hard drives, printing, burning to CDs/DVDs, copy/ paste/ screen print to clipboard, file access
  • Application monitoring triggered by user, user group, predefined application or application groups
  • Classification by regulated data type such as credit card numbers
Discovery of confidential data in local and network data repositories
  • Comprehensive discovery: network scans, local scans (via endpoint software agent); ad-hoc or scheduled scans
  • Coverage: network-based scan of databases, file shares, Exchange, SharePoint; local scan based on file type, size, age
  • Identification: over 400 file types, including Microsoft Exchange PSTs; file fingerprints, compliance templates
Built-in data identification using patented Websense Precise ID™ technologies
  • Automated, accurate identification of confidential data: keywords, dictionaries, fingerprinting, regular expressions, thresholds, context, proximity, and correlation for unstructured, structured data (e.g., database)
  • Effectivedetection: reduce false positives and business disruption by disregarding data if not mapped to customer data (by using fingerprints) or if below specified threshold
Flexible deployment options including built-in web proxy and integration with third-party web proxies
  • Websense Web Security integration: Route HTTP, HTTPS, FTP traffic for analysis by Websense Data Security via ICAP protocol
  • No need for additional solutions: HTTP, SMTP, IM, FTP and HTTPS (with Websense Web Security, for web proxy)
  • Flexible and cost effective: (1) monitor or protect mode, (2) passby/span port or inline/tap, (3) with Websense Web Security or any standard web proxy, (4) with Websense Email Security or any SMTP-compliant MTA
  • Efficiency: schedule discovery scans when system not running off battery (endpoint); during off-peak hours; network-based (coverage) vs. agent-based (performance); exception lists in IP range for network discovery
  • Endpoint agent deployment: Microsoft SMS or other methods; avoid conflict with antivirus, personal firewalls; phased deployment with user profiles; enable/disable agent
  • Investment protection: Deploy modules in phases as needed

Unified management and reporting? Definitely. The Websense TRITON™ Console gives you one intuitive, web-based interface for managing and reporting of web, email, and DLP. This innovative approach provides:

  • Greater visibility and control
  • Over 55 built-in reports
  • Extensive customization capabilities
  • Policy wizards, configuration templates, and more

Cost? Complexity? Cut it out. With Websense DLP, you bypass the complexities and costs of multiple vendors and deployments. In fact, our full Data Security Suite is so easy to deploy and manage that you can have it up and running in under an hour. Less software, less hardware, lower cost, and less complexity.


The TRITON Console gives you a user-friendly, web-based interface for data security. When you're ready to expand your coverage, just install a simple key to get instant access to additional security controls.




Example: How Websense helps
prevent data loss.
Let's say an employee attempts to send sensitive information to an email account. At this point, the employee receives a warning or verification prompt before he or she can continue. You immediately receive a report that shows the user, the destination, and the type of information. Unlike other DLP products, Websense DLP gives you:

  • Greater visibility into the action, thus allowing legitimate business uses that other products would block
  • More detailed reports, saving you time in tracking down suspicious incidents

Destination awareness.
It makes a big difference in data security.

Get incident alerts in plain English so you can track down security breaches in minutes. Our destination awareness capability reduces risk, saves hassle, and boosts your productivity.




PreciseID isolates the outlaws. Websense® PreciseID is the first and only "intelligent" security system. Here's how it works:

  • Our patented PreciseID technology conducts 24/7 deep analysis of all content, including web, email, data, and apps, in real time
  • When something suspicious pops up in, say, email, PreciseID instantly alerts web, data, and other elements of content security
  • PreciseID isolates the would-be invader, prevents a zero-hour attack, and keeps your business running without a blip

Simplicity is our specialty in data security. Data security is a complicated business for us. For you, we've made it simple, with a solution that you can:

  • Manage from one unified console
  • Download and install in just a few hours
  • Deploy quickly with over 1,000 built-in policy rules
  • Expand to cover DLP in web or email with a quick mouse click

The goal of security is to protect your essential information – such as financial info, databases, and employee records – in all locations, including email, websites, PCs, laptops, USB drives, and printers.