Unipro reduced incident investigation time by 50% thanks to the Solar Dozor DLP system

2021: Switch to Solar Dozor

The Unipro energy company completed the implementation of the Solar Dozor Rostelecom-Solar DLP system, migrating from the product of another vendor. Rostelecom-Solar announced this on July 1, 2021. Unipro PJSC uses the implemented solution to prevent the leakage of confidential data outside the corporate network, detect signs of internal fraud and actions of employees that cause economic and reputational damage to the organization.

Within a pilot whose tasks included deploying selected modules DLP-systems, the Solar Dozor installation was designed and implemented, which included the basic Dozor Core module for monitoring, analyzing and archiving messages, as well as Dozor Mail Server Connector interceptor modules for monitoring communications through corporate mail systems, Dozor Endpoint Agent for monitoring workstations, Dozor Traffic for Offic Analyzer and Network Traffic Recognition for Offic Analyzer Inspection. As file storages expansion modules, the customer has chosen Dozor Dossier to analyze user behavior and identify anomalies, Dozor OCR to recognize text in graphics data, and Dozor Long-Term Archive for long-term archive storage.

After the pilot implementation was completed, the system was put into operation. Unipro experts appreciated its flexibility and high level of work with large archives of information. The head of the information security department of Unipro PJSC Viktor Pensky notes that the migration to another system reduced the time to investigate incidents by more than 50%, and the project carried out an operation to transfer data from the old system of another manufacturer, which had its own data structure. The amount of data transferred exceeded 16 terabytes, while there was no downtime in the collection and analysis of events.

The key factor in choosing the Solar Dozor solution was the presence of architectural features in the system that make it possible to ensure the reliability of operations to maintain large amounts of information stored in the system and not load data channels in the geographically distributed infrastructure of the company, thereby minimizing the impact on business systems.

At the end of 2020, Unipro decided to scale Solar Dozor to all five branches of the company, introducing another module - MultiDozor. Unipro security personnel will now be able to see the full picture of events and processes in terms of information security of the company as a whole in real time. MultiDozor allows you to centrally manage DLP on the one hand, and flexibly configure rules for individual stores on the other. After deploying the MultiDozor to Unipro PJSC, Solar Dozor will monitor more than 2,300 workstations.