Gaining IP Visibility and Control Without Impacting Endpoint Performance

The first priority was to protect was the company’s engineering resources; software source code, design documents, and trade secrets. But while protecting IP was critical, the solution needed to be non-invasive. Engineers designing and testing complex software cannot have their devices slowed down, nor can they interrupt normal workflows. Changes to workflows and additional approval processes would negatively affect employee productivity and adoption. In addition, the company needed a solution that integrated with their existing infrastructure and privilege management systems.

Critical Success Factors

• Provide complete visibility to the targeted IP at all times
• Integrate with existing internal environment and outsourced IT infrastructure
• Zero impact on endpoint performance
• Free up internal security resources
• Collaborative partner from pilot to full rollout

The Solution

After an extensive selection process, the company determined that Fortra™’s Digital Guardian® provided the best mix of visibility to IP, control over information movement, and low impact on the endpoints and users. The Digital Guardian team worked side by side with the company’s subject matter experts to develop policies and ensure that they had full buy-in to each step in the pilot.

Work started with the engineering teams that used IBM® Rational® ClearCase® to manage their software assets. Digital Guardian automatically classified all information stored in ClearCase®, avoiding the often tedious and error prone task of manually classifying IP. Integration with Active Directory® allowed Digital Guardian to understand and “inherit” the permissions of each user. This ensured that each engineer had unimpeded access to the files they required to do their jobs, while blocking access to IP for which they lacked permissions. Finally, integration with Splunk allowed the company’s outsourced IT vendor to process Digital Guardian alerts using existing methods.

Initially, the company wanted visibility to the IP and an understanding of how users moved the information. Automatic classification along with Digital Guardian’s endpoint agents and reporting and analytics interface provided this immediately. The next step was to reinforce company policies through soft blocking; DG generated prompts to notify users taking unauthorized actions. Finally, full blocking that enforced appropriate use policies and alerts to actions that could put IP at risk provided the controls the company required.

The Results

Digital Guardian was deployed across 5,000 endpoints. The CISO gained the visibility into the risks to the company’s IP and applied controls to policies that had previously been unenforceable. Digital Guardian’s MSP provided the support the company desired without the overhead of additional IT staff.