|
Configuration/ManagementA-
Installation of Workshare Professional on the client uses an intuitive wizard-driven process. Workshare automatically installs Office integration features, allowing the user to quickly begin operating in a Workshare environment. Office 2007 users will find a Workshare pane in the Office Ribbon that offers all Workshare functionality in a familiar format. Administrators create and manage policy through the Workshare Policy Designer in the desktop version of the product. Enterprise installations may distribute policies through a centralized server.
Policy ControlA
Workshare allows for an impressive degree of granular policy control over user actions, allowing administrators to specify broad or narrow criteria and choose from a large set of policy violation responses. For example, we created a policy to intercept all outbound email including Microsoft Office attachments containing reviewer comments, and scrub those comments from the document before transmitting it to the end user. In addition to cleaning documents, administrators may create policies that block transmission, alert administrators to the violati...
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
on, send the document for review prior to transmission, convert the document to a secure PDF or compress the file in a secure ZIP. Administrators may create policies based upon document contents (keywords, phrases or regular expression matches) or attributes (classification, hidden metadata, file name, file type, file size).
EffectivenessC
Workshare met all of its stated document control objectives and correctly enforced our defined policies when we attempted to send protected content via Outlook email. The biggest drawback to this product is its sole reliance upon three supported email environments: Microsoft Outlook, Lotus Notes and Novell GroupWise. This limitation makes the content distribution control features of Workshare useful only to prevent accidental data leakage or deter a novice attacker. In fact, we were able to defeat the content controls by simply uploading the file via a Web-based email connection. Workshare does offer a complementary network appliance that filters all SMTP and HTTP connections, but this device does not support encrypted connections, making it straightforward for a determined attacker to undermine the system's controls.
|
 |
|
