Varonis Data Security Platform

Main articles:

• Security Information and Event Management (SIEM)
• DLP - Data Loss/Leak Prevention

2022: Varonis 8.6 Cybersecurity Platform

On January 30, 2022 , Varonis Systems announced the release of the Varonis cybersecurity platform version 8.6. Updates include advanced data protection in Microsoft 365 with easy-to-use tools for detecting unsecured files and folders, additional protection from ransomware, and automatic tagging of sensitive files.

Source: atos.net

The Varonis cybersecurity platform helps organizations protect critical information with automation to provide zero trust, address privacy and compliance challenges, and detect advanced attacks. Version 8.6 features help companies protect sensitive data in Microsoft 365 and make it easier to discover and eliminate redundant access rights when working together in the cloud.

Updates to version 8.6 of the Varonis cybersecurity platform include:

• Dashboards for visualizing data from shared links. The platform shows how to share sensitive files, folders or sites in SharePoint Online and OneDrive - both for specific users and for the entire organization, external users, and even the entire Internet. This allows you to quickly close excess access and reduce risks to the company.
• Threat models for detection and protection against ransomware and modern attacks. Updated behavioral-based threat models are designed specifically to detect ransomware and internal threats in a Microsoft 365 environment.
• Enhanced ability to adjust access rights for SharePoint Online and OneDrive sites. IS administrators can secure data by removing public links that expose sensitive information to too many individuals, regardless of who "owns" the site.
• Automatically label and enforce data protection policies. Varonis data classification labels are based on built-in automatic classification results and integrate with Microsoft AIP, which eliminates manual file tagging for encryption and privacy protection. Not only does Varonis label cloud files, it automatically reassigns or deletes labels when the policy changes, if the content of the file no longer matches the policy, or if the files were incorrectly marked manually.

"Microsoft 365 is gradually gaining momentum in Russia. It is already actively used for work and communications by many companies, it is possible to select such applications as Teams using as the platform of storage SharePoint OL and OneDrive. At the same time, you need to remember that the convenience and speed of interaction between users greatly complicates control over data security. With the Varonis cybersecurity platform, companies can leverage collaboration solutions while providing the right level of security not only in Microsoft 365, but also in hybrid IT cloud environments. " told Daniel Gutman, head of Varonis in Russia

2021

Integration with Panzura CloudFS

The company Varonis announced on October 26, 2021 that it would provide data protection in, cloudy storages managed by the system. Panzura CloudFS cyber security The Varonis platform, designed to protect corporate against data unauthorized access and, with cyber threats integrated the global cloud storage management system Panzura CloudFS 8 Defend. More. here

Add threat analysis to Microsoft 365

Varonis, one of the representatives of the global cybersecurity and data analytics market, announced on January 25, 2021 the expansion of the functionality of its solution - the Varonis cybersecurity platform.

The transition to remote operation has led to an increase in the popularity of employee collaboration tools. For example, the number of active users of Microsoft Teams increased from 75 million per day (as of April 2020) to 115 million per day (as of October 2020), and this figure continues to grow. With large amounts of data being created and transferred through collaboration applications, it is increasingly difficult for information security officers to track where sensitive data is stored, by whom, and where. Using built-in Microsoft security does not solve this problem.

With the new capabilities of the Varonis cybersecurity platform, it is possible to close blind spots associated with the vulnerability of sensitive data that appears in the cloud when working together in Microsoft 365 and other cloud applications.

The Varonis cybersecurity platform allows you to automate critical information protection processes, ensure compliance with the principles of "zero trust," solve privacy and compliance tasks, and detect cyber threats emanating from both outside and from insiders.

Among the options that appeared:

• Analyze the full range of threats in Microsoft 365. Dashboards on the dashboard show when collaboration links, public sites, and redundant access rights open information to too many employees.
• Advanced threat detection and update of compromise indicators (IOC). Additional threat models for Azure AD help prevent attacks on Microsoft 365 client environments, and automatic IOC updates help protect against threats such as the Zerologon and SUNBURST vulnerabilities.
• More capabilities for detailed retrieval of sensitive data. The added search capabilities allow you to disclose the logic of queries and find sensitive data in local and cloud data stores.
• Extend support for networked storage. Supports Panzura, EMC NAS, Nasuni 8.5, Hitachi NAS, and ONTAP SELECT 9.7 NetApp, and Hitachi NAS Cluster Namespace.

Microsoft 365 makes it easier to share sensitive data with your colleagues and guest users, but it's almost impossible to effectively detect and control collaboration risks with built-in tools. The emerging features of version 8.5 of the Varonis cybersecurity platform will provide IT and security professionals with a clear idea of ​ ​ how users share information to quickly track and address the risks of data vulnerability and from internal threats and cyber attacks, said David Gibson, marketing director at Varonis.

2020: Remote Connection Monitoring Tools, Advanced Analytics

Varonis released in August 2020 an update to the Varonis Data Security Platform. This version of the platform contains remote connection control tools, enterprise data protection in cloud and collaboration platforms, as well as advanced analytics for early detection of internal threats and cyber attacks.

"Before the coronavirus pandemic, information security directors had to worry about five offices for 1,500 users with several remote employees. Today, they have to worry about 1,500 vulnerable home offices, where remote employees often use unprotected computers to access critical data through a VPN. Under these conditions, it is critical for information security directors to know how employees connect to corporate networks, what data is accessed, and with whom they are shared. The updated cybersecurity platform is designed to provide answers to these and many other questions, "said Daniel Gutman, head of Varonis in Russia.

To monitor and control remote connections, the new version of the platform introduced dashboards with key risk indicators, for example, active VPN connections from the blacklist of countries, privileged access to domains with low reputation, and others.

The updated Varonis cybersecurity platform provides earlier detection of signs of internal threats and cyber attacks, regardless of how the attacker tries to log in: by browsing passwords using ransomware, or purposefully studying the infrastructure. To do this, special analysis algorithms have been developed that are built into the platform and help quickly find compromise indicators: attempts to fail to log in via VPN from disconnected users or download a large amount of data through the web version of email.

The popular Office 365 and Microsoft Teams are still a blind spot for information security officers. The Varonis cybersecurity platform provides a transparent picture of the movement and use of data in these applications, as well as identifying the risks of data loss through built-in threat models. In addition, the platform has new reports that display information about data available from the outside and data shared through public links.

"Varonis has the ability to detect threats by combining several hard-to-reach data streams. These innovations implemented in the updated cybersecurity platform solve the problems that arose due to universal remote work: they give companies an understanding of where confidential information is sent, the opportunity to provide access to it only to certain employees and detect even advanced cyber attacks, "said Daniel Gutman, head of Varonis in Russia.