Ratinder Paul Singh Ahuja, Ph.D C.O.O & C.T.O

Reconnex performs content monitoring, alerting, and forensic analysis The Reconnex iGuard SOX GLBA HIPAA Compliance SB1386 Switch Workplace Safety Appropriate Use of Corporate Resources Corporate Governance “ Insider” Threats Forensics Social Engineering Critical Information Security IP theft Defensibility of Trade Secrets Competitive Intelligence Competitive Advantage

SOX

GLBA

HIPAA

SB1386

Workplace Safety

Appropriate Use of Corporate Resources

“ Insider” Threats

Forensics

Social Engineering

IP theft

Defensibility of Trade Secrets

Competitive Intelligence

Traditional Bottom UP Approach Firewalls/antivirus Network intrusion detection/protection Network flow tools limited session reconstruction Bits Ports Protocols Communication

Firewalls/antivirus

Network intrusion detection/protection

Network flow tools

limited session reconstruction

The Bottom Up View: Bytes, Ports and Protocols

More Bottom Up

New Approach: Top Down Bits Ports Protocols Communication Objects, document & applications WORD JPG GIF BMP TIFF C++

What Can You See? Over 150 content types E-Mail Microsoft Excel Confidential Documents Proprietary Format Microsoft PowerPoint Schematics Offshore Development India Romania Source code

Reconnex has the ONLY Solution That Addresses the Known and Unknown Threats The Reconnex iManager Register — Detect — Remediate — Report Gigabit Ethernet The Reconnex iGuard Executive Team Off-Shore InfoSec/IT Signature Match Finance Sales Databases or Repositories Integration Points SIM Storage AD/LDAP URL Filtering Web & Mail Proxies The Reconnex iController Rule Match Switch or Tap “ Reconnex’s forensics capabilities are a key piece of my compliance policy.”

Integration Points

SIM

Storage

AD/LDAP

URL Filtering

Web & Mail Proxies

Reconnex Surveillance Types General Surveillance of all content, documents and communications Document/Date/Time/Size/Watermarks/Sender/Recipient … Targeted Surveillance, powered by Reconnex Document Registration Exact or Generic Phrases/Individuals… “ A Unique Solution to the Problem of False Positives” Can be operated on an ad hoc or scheduled basis

General Surveillance of all content, documents and communications

Document/Date/Time/Size/Watermarks/Sender/Recipient …

Targeted Surveillance, powered by Reconnex Document Registration

Exact or Generic Phrases/Individuals…

“ A Unique Solution to the Problem of False Positives”

Can be operated on an ad hoc or scheduled basis

What does Reconnex iGuard do? Captures, classifies and stores in real time all content going in or out of a network Alerts are generated for policy violations in real time Allows for forensic searches over captured content for issues that you may become aware of in the future Gigabit network

Captures, classifies and stores in real time all content going in or out of a network

Alerts are generated for policy violations in real time

Allows for forensic searches over captured content for issues that you may become aware of in the future

The Reconnex Difference RCPE Network Traffic Rule Creator Real-Time Alerts End User Historical Content (RFS) Content Summarization Look Up Table Inbound capture(?) Outbound capture Forensic Investigator

Why don’t other products do this? Historical Content (RFS) Content Summarization Look Up Table Forensic Investigator !!Because it’s HARD!!

Easy to use Browser based access

Drill down to actual content

Moments of Revelation from “Top Down” Work with Reconnex

www.reconnex.net