Identity-based Reporting
Identity-based Reporting
Insiders like current and former employees, suppliers and partners cause 83 % of security breaches, according to a PriceWaterhouse Coopers’ global survey. 35 % of breaches are of intellectual property theft. Hence, Identity-based Reporting that gives visibility into who is accessing critical network resources, the extent of usage and user privileges is a critical element of network security.
Cyberoam iView – Identity Monitoring
Cyberoam iView is the open-source logging and reporting solution that shows “who is accessing what” in the network, reporting network usage, violation of privileges, entry of malware or spam that can be traced to users, enabling organizations to enhance security levels while meeting the requirements of regulatory compliance.
User activity over a range of protocols like HTTP, FTP, email, IM, P2P and more across different user IDs alerts organizations to internal security breaches and their source, allowing them to take immediate action.
Data Loss Prevention
Identity-based reporting of user access plays a key role in controlling data loss. Consider this scenario. A user attempts to access sensitive documents in the database server to which he does not have access privilege. Firstly, Cyberoam iView reports his blocked attempts. Secondly, if the user attempts access via different client devices, administrators would be notified through the reporting which gives both the username and the IP address from which the attempts are made. Such deviation from normal practice alerts administrators to potential violations and data loss.
Consider another scenario where the user tries to access the database server through login ids of other employees from her device. Administrators would know such takeover attempts through Cyberoam iView, allowing them to take rapid action.
Employees on notice can be monitored and their past records revisited and reports provided to HR or the respective departments, offering critical information related to the users’ access practices during the most vulnerable period for sensitive data during the employee life cycle.
Security Monitoring
Cyberoam iView provides security reports related to malware download or upload, spam received and sent, indicating unsafe practices of users. In addition, reports of attacks, attackers, victims, applications used by the attacks, break-down of attacks by severity, top spam recipients, senders, applications used to send spam as well as of viruses, bifurcated into web, mail, FTP through which viruses entered offer effective security monitoring.
Web Usage
Cyberoam iView allows administrators to know when users’ web usage deviates from acceptable policies based on time of activity and volume of data downloaded or uploaded, through web usage reports of users, categories, domains, content, web hosts and applications. Reports of blocked web attempts offer information related to attempts to compromise user privileges. A combination of these web usage reports offers a comprehensive view of user web activity, allowing administrators to correct user privileges to enhance productivity and security.
Cyberoam iView – Identity Monitoring
Cyberoam iView is the open-source logging and reporting solution that shows “who is accessing what” in the network, reporting network usage, violation of privileges, entry of malware or spam that can be traced to users, enabling organizations to enhance security levels while meeting the requirements of regulatory compliance.
User activity over a range of protocols like HTTP, FTP, email, IM, P2P and more across different user IDs alerts organizations to internal security breaches and their source, allowing them to take immediate action.
Data Loss Prevention
Identity-based reporting of user access plays a key role in controlling data loss. Consider this scenario. A user attempts to access sensitive documents in the database server to which he does not have access privilege. Firstly, Cyberoam iView reports his blocked attempts. Secondly, if the user attempts access via different client devices, administrators would be notified through the reporting which gives both the username and the IP address from which the attempts are made. Such deviation from normal practice alerts administrators to potential violations and data loss.
Consider another scenario where the user tries to access the database server through login ids of other employees from her device. Administrators would know such takeover attempts through Cyberoam iView, allowing them to take rapid action.
Employees on notice can be monitored and their past records revisited and reports provided to HR or the respective departments, offering critical information related to the users’ access practices during the most vulnerable period for sensitive data during the employee life cycle.
Security Monitoring
Cyberoam iView provides security reports related to malware download or upload, spam received and sent, indicating unsafe practices of users. In addition, reports of attacks, attackers, victims, applications used by the attacks, break-down of attacks by severity, top spam recipients, senders, applications used to send spam as well as of viruses, bifurcated into web, mail, FTP through which viruses entered offer effective security monitoring.
Web Usage
Cyberoam iView allows administrators to know when users’ web usage deviates from acceptable policies based on time of activity and volume of data downloaded or uploaded, through web usage reports of users, categories, domains, content, web hosts and applications. Reports of blocked web attempts offer information related to attempts to compromise user privileges. A combination of these web usage reports offers a comprehensive view of user web activity, allowing administrators to correct user privileges to enhance productivity and security.