Endpoint protection components are included in DataTrack Platform and intended to control and monitor data transition to communication ports of workstations and laptops as well as removable media usage. The local agents receive security policies from security server and report back about security events. The agents can work online or offline.
Another function of the local agents is taking ‘shadow copy’ of transiting files, taking its ‘fingerprints’ and comparing to classified documents ‘fingerprints’ samples. Taking ‘shadow copy’ is very useful for computer incidents investigation as evident. The copy can be stored at security server as original file and indexed to be searchable and browsed during an investigation

Comments are closed.