Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

Offers a method to identify file owners when the owner does not exist in the file system being scanned

Created: 20 Apr 2010 • Updated: 23 Oct 2010 | 4 comments
Sunny Cho's picture

Hi all,

As I known, DLP can offer a method to identify file owners when the owner does not exist in the file system being scanned.
How can I test this case?

Thanks.
Best Regards,
Sunny 

Discussion Filed Under:

Comments 4 CommentsJump to latest comment

Neil Christie's picture

Do you have the Data Insight product?  This would seemingly be required to support this effort.  It ties into your SAN infrastructure and produces correlation to the file with sensitive data and who is accessing it to determine the file owner.

Naor Penso's picture

For this feature you will have to use Symantec Data Insight.
It is a new product that arrived with DLP 10.5
As far as i know, If you bought the Symantec DLP Suite you can receive it free of charge.
Data Insight connects to your NetApp or EMC Cellera and writes down every access to files in order to give you a better auditing on your storage files.

You can read all about it in here:
http://eval.symantec.com/mktginfo/enterprise/fact_...

Kind regards,
Naor Penso

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
Thanks :)

Sunny Cho's picture

Based my understanding, DLP 10 can extract the file attribute, i.e. file owner. even the owner is not exist in the file system.

Pls advise.

Naor Penso's picture

There is no such possibility as far as I know.
The DLP shows the things he finds, if there is no file owner then the DLP has no way of knowing who is the data owner is. what you can try to do is correlate between the incident and older incident to see which users touched the file.

For your needs, you should use Symantec Data Insight. If you contact your Symantec Partner i am positive they will explain everything and help you.

Kind regrads,
Naor Penso

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
Thanks :)