This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using Sophos to find protected (customer) information.

I was thinking that an AV scanning engine would be a great tool for locating instances of data of interest on all of the PCs in an enterprise.  For example, financial institutions need to be able to identify where in the enterprise its customer data is being stored.  It would be nice if we could have a text file containing "regular expressions", one per line, to describe things like credit card numbers, social security numbers, and the like, that the scanning engine would include when doing its regularly scheduled full volume scans and report on through the enterprise console and/or scanning logs.  Would that be possible?

:8775


This thread was automatically locked due to age.
Parents
  • Hi,

    We are looking at implementing what the DLP market calls "data at rest" scanning on the endpoint. One element will be a serperate tool which enables you to off load file scanning to a seperate workstation or server but our intention is to also provide integrated scanning from within the endpoint agent. We'll probably use technology similar to that in ESC 9.7 to reduce the scanning impact on end users. I'd welcome any feedback / requirements on either approach.

    Best regards,

    John Stringer (product manager)

    :8859
Reply
  • Hi,

    We are looking at implementing what the DLP market calls "data at rest" scanning on the endpoint. One element will be a serperate tool which enables you to off load file scanning to a seperate workstation or server but our intention is to also provide integrated scanning from within the endpoint agent. We'll probably use technology similar to that in ESC 9.7 to reduce the scanning impact on end users. I'd welcome any feedback / requirements on either approach.

    Best regards,

    John Stringer (product manager)

    :8859
Children
No Data