trend micro data protection

Copyright 2011 Trend Micro Inc.

Background and upgrade notes on ScanMail™ for Exchange 10.2, PortalProtect for SharePoint 2.1 and InterScan™ Messaging Security 8.2

Trend Micro Data Protection Product announcements September 2011


The situation• Data protection is a growing concern for organizations as more

stringent privacy regulations take effect and data breaches continue.

• Despite this, many organizations struggle with complexity and cost of standalone data loss prevention (DLP) solutions.

• Malicious URLs are now the #1 email threat and are twice as common as malicious attachments.

“2011 has been the year of phishing attacks, as proven by the high-profile entry point for attacks at RSA, Oak Ridge National Laboratory and International Monetary Fund,” said John Maddison,

executive GM of data center business unit for Trend Micro. “Targeted phishing emails often don’t resemble spam and typically contain social engineering that entice an unsuspecting user

to click on a link to a website where malware will be silently downloaded.”


September 19th news overview• Today, Trend Micro is delivering on its promise of expanding its Data

Protection portfolio announced in February 2011 by providing additional DLP functionality as a module in many of our award winning security platforms. Today’s product announcements include:– ScanMail™ for Exchange 10.2– PortalProtect for SharePoint 2.1– InterScan™ Messaging Security 8.2

• Trend Micro Data Protection has a breadth of integrated data protection products to protect, control and encrypt.

• While other vendors may have DLP capabilities built into a single product, Trend Micro has integrated DLP capabilities for email servers, collaboration servers, virtual gateway appliances and endpoint protection.


Key New Features in ScanMail for Microsoft Exchange 10.2• SMEX is the only mail-server-based security product with a web

reputation service to block email containing malicious URLs in addition to scanning for content and viruses.

• New Features– Second-generation Data Loss Prevention (DLP) Lite

• With data validators, compliance templates, and over 40 worldwide data identifiers for custom templates

– Malicious URL detection • Inside attachments in addition to the message body

– New Local Smart Protection Server• Increases performance and reduces network latency

• Why add Data Protection at the mail server?– Mistakes happen such as a Richmond School District where personnel information

was accidentally distributed to all email users at the district. The district was forced to shut down email for the day, explain themselves on the nightly news and possibly pay for identity theft protection for the affected employees: http://www.wtvr.com/news/wtvr-email-puts-richmond-school-emp-110410,0,5022273.story

http://www.wtvr.com/news/wtvr-email-puts-richmond-school-emp-110410,0,5022273.story

http://www.wtvr.com/news/wtvr-email-puts-richmond-school-emp-110410,0,5022273.story


Key New Features in PortalProtect for Microsoft SharePoint 2.1• PortalProtect the only major security solution on the market today that

protects SharePoint as a social collaboration tool, in addition to a file-sharing tool.

• New Features– Second-generation DLP Lite

• With data validators, compliance templates, and 36 worldwide data identifiers for custom templates.

– Local Smart Protection Server • Increases performance and reduces network latency

– Support for remote BLOB storage• Enables use of more scalable and less expensive storage outside of SharePoint while

maintaining security controls

• Why add Data Protection for SharePoint?– Administrative need visibility into what is in their SharePoint. For example at the

Mississippi personnel records, including names, contact info, and social security numbers, were posted to a publically accessible SharePoint site for 1 month before a privacy watchdog group informed administrators of the problem: http://www.armytimes.com/news/2010/10/ap-mississippi-guard-information-breach-100810/

http://www.armytimes.com/news/2010/10/ap-mississippi-guard-information-breach-100810/


Key New Features for InterScan Messaging Security 8.2• InterScan Messaging helps enterprise IT professionals deal with their

growing regulatory compliance and data protection challenges.

• New Features– A new Data Privacy and Email Encryption module– A widget-based dashboard for easy administration– Virtual appliance support for Microsoft Hyper-V

• In addition to VMware and a bare-metal software appliance

• Why add Data Protection at the messaging gateway?– Last chance to prevent privacy data from leaving the network via email– Eases compliance, reduces risk, protects digital assets– Email Encryption and DLP work together – if controlled data is detected it

can be automatically encrypted

Copyright 2011 Trend Micro Inc.Classification

Background on Trend Micro Data Protection


Trends Shaping Data Protection

Classification 04/08/2023

Growing penalties and notification requirements

More Stringent Regulations

200 M laptops, 174 M smart phones and 250 M flash drives sold in 2009.

Increasing Mobility

Through 2015, mitigating data breaches will cost 10 times more than installing data protection mechanisms on mobile devices

Rising Frequency & Cost of Data Breach

Data storage in multi-tenant environments create unique privacy and security challenges

Cloud Computing

Data protection should be a key element in any enterprise data security strategy

Sources: IDC, Gartner, Ponemon Institute, Santa Clara Consulting Group, Identity Theft Resource Center

Copyright 2011 Trend Micro Inc. 9

Trend Micro vision: A world safe for exchanging digital information

Physical

Virtual

Cloud

ii


Data Protection Customer Challenges

Classification 10

Too complex

Too expensive

Hard to manage


Trend Micro Data Protection Encrypt. Control. Protect. – Endpoint to Cloud

“Trend Micro Data Protection ensures the availability, integrity and confidentiality of business information by protecting it against damage, loss, and unauthorized access.

It means keeping your data safe, wherever it resides, from intentional or unintentional harm”

Encryption Device Control DLP

11Classification 04/08/2023


SecureCloud

Data in use (endpoint)Data in motion

Gateway & Server DLP

Gateway Encryption

• DLP Network Monitor• Interscan Messaging Security• ScanMail for Exchange/Lotus Domino • Threat Management Services• Worry-Free Business Security Adv*

• Email Encryption Gateway• Interscan Messaging Security• Hosted Email Encryption

Data at rest

Data at rest

* SB

• DLP Endpoint• OfficeScan• Worry-Free Business Security Adv*

File & Folder / Whole Disk / Removable Media / Email

Encryption

DLP & Device Control

• Endpoint Encryption• Email Encryption Client

• Deep Security – Deep Packet Inspection

• Vulnerability Management Services

Data Discovery

Web Site Protection

DLP

File Integrity Monitoring

Backup

DLP Endpoint

SafeSync*

PortalProtect

Deep Security –Integrity Monitoring

12

Trend Micro Data Protection Product Portfolio Map

Threat Information & Policy Management

SIEM• SNMP• SYSLOG

Enterprise Security Manager


Trend Micro Data Protection security promise

Classification 04/08/2023

LowerTCO

Endpoint to Cloud Protection

Made Easier

Develop products and services that deliver…

Easeof Use

Copyright 2011 Trend Micro Inc.Classification

For More Information:www.trendmicro.com/dataprotection

trend micro data protection

Technology