SearchInform FTPSniffer

SearchInform FTPSniffer is the software product intended for fight against information leaks according to the popular file transfer protocol FTP.

The FTP protocol is today the most important transmission medium of large volumes of data as initially it is drafted for file transfer of any size, and can be used by unfair employees for transfer of the whole databases, the detailed drawings, packets of the scanned documents and other files having the big size. For this reason control of FTP is of great importance for information security support in those organizations where there are risks of leakages of large volumes of information.

FTPSniffer is based on the agents set at the user workstations and is a part of SearchInform NetworkSniffer Agents (NSA), the uniform agency module installed on the user workstations. The agent set on client computers reports all intercepted entering and outbound traffic to the server where it is analyzed and located in special storage, and then can be used for investigation of the incidents which occurred earlier connected with information leak. SearchInform FTPSniffer supports work with the protected FTPS protocol working as normal FTP over the protected TLS or SSL connection.

FTPSniffer is a part of the complete solution for information security support and control of information flows in the organizations – "A circuit of information security of SearchInform". Thanks to integration with other components of this packet, FTPSniffer allows to investigate quickly incidents, building a cut of activities of employees through all channels of communication, and using uniform base of incidents for all channels.