This article can also be found in the Premium Editorial Download "Information Security magazine: Lessons learned from good and bad NAC implementations."
Download it now to read this article plus other related content.
DATA LOSS PREVENTION
Price: Starts at $49.95 per client
Workshare Protect Premium 6.0 seeks to eliminate the malicious or accidental leakage of sensitive corporate data.
Workshare is client software that allows you to assess document risk, preserve content integrity and prevent disclosure of sensitive or confidential information. It installs several utilities and also integrates with products such as Microsoft Office and Lotus Notes.
The Policy Designer allows Workshare to be customized for your environment. Overall, it's well thought out, making it easy to create new policies. For example, we crafted a policy that searched for the word "confidential" in all text and HTML documents. You determine the files that are searched, such as Office, RTF, text, HTML, zip, XML and PDF. You can also create regular expressions (regex) to search for any standardized data such as account numbers. Several other criteria can be matched including looking in hidden data such as small text, hidden text, white text, etc.
Rules can be applied to Workshare "channels," the messaging protocol through which information is distributed--client email, Active Content Channel (in Office documents), removable devices and mail servers.
The actions and channels allow you to define how and where the information can be sent or stored. Our sample rule searched for "confidential," allowing it to be used in documents, but not allowing users to email it to anyone outside the corporation. The Workshare routing feature allows you to define who can and cannot be sent sensitive emails.
This was first published in September 2008