CA steers DLP towards access, identity management |
 |
By Neil Roiter, Senior Technology Editor, Information Security magazine
06 Jan 2009 | SearchSecurity.com |
|
|
CA's entry into the rapidly consolidating data leak prevention (DLP) market takes a somewhat different tack from security companies -- particularly endpoint security vendors, such as Symantec Corp., McAfee Inc. and Trend Micro Inc.
|
| SearchSecurity.com: |
| To get security news and tips delivered to your inbox, click here to sign up for our free newsletter. |
|
|
|
|
While CA Inc. is obviously a player in that market, it approaches the acquisition of DLP vendor Orchestria Corp., which was announced yesterday, primarily from anidentity and access management perspective.
"Or competitors tend to be more IBM and Oracle, from an identity and access management point of view, and today they don't have these technologies," said Dave Hansen, senior vice president and general manager of CA's Security Management business unit. "Being a leader in the stand-alone DLP space, but then also in the integrated identity and access management with DLP space is going to be our niche in the market."
|
|
|
|
|
CA has potential to make all this work for it; whether they can work it out is simply a question of integration.
Nick Selby
research director of enterprise security, 451 Group
|
|
|
|
|
|
|
|
|
|
Both IBM and Oracle Corp. are Orchestria partners. Hansen said CA will be reviewing Orchestria's partnerships "very judiciously" in the coming weeks. Hansen also said CA will review channel opportunities with Orchestria.
"Focus on enterprise strategic accounts, making this available through our channels is something we're sitting down with Orchestria about, and determining their routes to market," he said. "They had a lot of direct as well. We'll be reviewing that and publishing our strategy over the next few weeks.
CA has focused on extending its IAM capabilities through acquisitions in recent months, snapping up identity and role management company Eurekify Ltd. in November and IDFocus, which brings strong separation of duty capabilities, in October.
Hansen said CA's goal is to integrate Orchestria in time for the RSA Conference in April, leveraging the already integrated Eurekify technology to provision users by role into CA Identity Manager and to use Orchestria's capabilities to "provision confidential data by role."
The latest acquisition is sound strategy, according to Nick Selby, research director of enterprise security at the 451 Group; a logical step in entitlement and identity and access management. Orchestria has solid technology -- strong data classification capabilities combined with data loss prevention "plays very much into entitlement management and identity and access management in 2009."
The key, however, is integration, which Selby said has not been CA's strong suit.
"Because it's strategic, there's a chance CA will actually do something with it," he said. "It makes a great deal of sense for this to land there -- from an identity standpoint, from an endpoint real estate standpoint, as well as from a data classification and agent standpoint. CA has potential to make all this work for it; whether they can work it out is simply a question of integration."
Selby said Orchestria has been actively looking for a buyer for some time, and although the purchase price has not been announced, it probably will be cheaper than some of the remaining pure-play DLP vendors, such as Fidelis Security Systems Inc. and Code Green Networks Inc. (Other independents include Vericept Corp., Verdasys Inc., GTB Technologies Inc. and Workshare Inc.).
The deal is the latest in a flurry of DLP acquisitions, including Symantec Corp. (Vontu), EMC Corp. (Tablus), McAfee Inc. (Onigma and Reconnex), Raytheon Co. (Oakley), Websense Inc. (Port Authority) and Trend Micro Inc. (Provilla).
|
|
|
|
