Product review: Titus Labs' Message Classification
This article can also be found in the Premium Editorial Download "Information Security magazine: Does security make the grade in Windows Server 2008?."
Download it now to read this article plus other related content.
The Message Classification Administration Tool facilitates creation of policy and configuration settings. It allows you to customize the primary and secondary classification labels. For example, those in the defense industry may configure primary classification levels of "Top Secret" and "Secret," and secondary classification labels to match handling caveats, such as "No Contrac-tors" or "No Foreign Nationals." You may create policies manually on each system, export them to other systems, or to a Group Policy Administrative Template for use with Active Directory. The Enterprise Edition offers tighter integration with Active Directory.
Message Classification met all of its stated goals during our testing. It correctly enforced policies designed to prevent the unauthorized downgrading of a message and required us to apply labels before sending a message. Message Classification integrates with Outlook and is straightforward for any end
| user, presenting pull-down menus to apply classification labels.
Message Classification allows you to create an audit trail using the built-in Windows Event Viewer, but provides very little granularity. You may choose to log warnings, audit messages, and/or informative messages, but cannot specify the logging of events based on message classification or other criteria. There is no native reporting functionality, requiring administrators to pore through Win- dows Event Viewer to find records of interest. It can be integrated with third-party tools for alerts and reports or integrated with log management products.
Message Classification fills a growing need for data security and regulatory compliance, but needs a stronger feature set for mainstream deployment.
Testing methodology: We tested Message Classification in a Windows XP environment using Microsoft Office 2007.
This was first published in February 2008