SearchInform FileSniffer

The product FileSniffer is intended for control of work of users on the file servers. Large volumes of corporate data among which there are confidential documents which are not intended for distribution outside the company contain the file servers. The staff of the organizations can trade on data about the file servers, being engaged in insider activity and reporting confidential data out of limits of the company. Therefore file servers need fixed control from the specialists who are responsible for information security in the organization.

SearchInform FileSniffer provides access control of employees to any corporate file servers working running operating systems of the Microsoft Windows family. Thanks to it the Information Security Service has an opportunity to reveal the suspicious activity of users during the work on the file servers consisting, for example, in downloading of large volume of data on the workstation or discovery of a large number of documents which considerably exceeds average on the organization. Thanks to a possibility of detection of similar actions of the user the security service can identify insiders among the staff of the organization.

The new product SearchInform is also irreplaceable also when conducting investigations of the incidents connected with violation of information security policies in the organizations. With its help it is possible to detect who and when got access to important documents, modified them. Also FileSniffer promotes more careful monitoring of actions of suspicious users.

SearchInform FileSniffer is a component of "A circuit of information security of SearchInform" of the leader in the market of Russia and the CIS countries of the complete solution for information security support and control of information flows in the organizations. The patented search algorithms of SearchInform company used in it allow to detect in the intercepted data confidential documents even when they were purposely changed by the insider, and integration with domain structure of Windows will allow to identify authentically the sender of information even when that tries to mask using anonymizers or proxy servers.