gigamon u - you will see, content monitoring, alerting, and forensic analysis
DESCRIPTION
Reconnex is the leader in information monitoring and protection appliances designed for any organization, including enterprises, government agencies or education institutions that want to protect their brands, maintain compliance, or protect sensitive information. A privately-held company based in Silicon Valley, Calif., Reconnex protects information for companies such as Cadence, WebEx Communications, The George Washington University, SIRVA and Maimonides Medical Center.TRANSCRIPT
![Page 1: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/1.jpg)
05/02/06 Reconnex Confidential
Ratinder Paul Singh Ahuja, Ph.DC.O.O & C.T.O
![Page 2: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/2.jpg)
05/02/06 Reconnex Confidential
The ReconnexiGuard
Reconnex performs content monitoring, alerting, andforensic analysis
• Workplace Safety• Appropriate Use of
Corporate Resources
CorporateGovernance
• “Insider” Threats• Forensics• Social Engineering
CriticalInformation
Security
• IP theft• Defensibility of Trade Secrets• Competitive Intelligence
CompetitiveAdvantage
• SOX• GLBA• HIPAA
Compliance
• SB1386
Switch
![Page 3: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/3.jpg)
05/02/06 Reconnex Confidential
Traditional Bottom UP Approach
BitsBits
PortsPorts
ProtocolsProtocols
CommunicationCommunication
• Firewalls/antivirus
• Networkintrusiondetection/protection
• Network flowtools
• limitedsessionreconstruction
![Page 4: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/4.jpg)
05/02/06 Reconnex Confidential
The Bottom Up View:Bytes, Ports and Protocols
![Page 5: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/5.jpg)
05/02/06 Reconnex Confidential
More Bottom Up
![Page 6: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/6.jpg)
05/02/06 Reconnex Confidential
New Approach: Top Down
BitsBits
PortsPorts
ProtocolsProtocols
CommunicationCommunication
Objects, document Objects, document & applications& applications
WORD JPG GIF BMP TIFF C++
![Page 7: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/7.jpg)
05/02/06 Reconnex Confidential
What Can You See? Over 150 contenttypes
E-Mail Microsoft Excel
ConfidentialDocuments
ProprietaryFormat
Microsoft PowerPoint
Schematics
Offshore Development
India Romania
Sourcecode
![Page 8: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/8.jpg)
05/02/06 Reconnex Confidential
The ReconnexiManager
Reconnex has the ONLY Solution ThatAddresses the Known and Unknown Threats
Register — Detect — Remediate — Report
GigabitEthernet
The ReconnexiGuard
Executive Team
Off-Shore
InfoSec/IT
SignatureMatch
Finance
SalesDatabasesor Repositories
Integration Points• SIM• Storage• AD/LDAP• URL Filtering• Web & Mail Proxies
The ReconnexiController
Rule Match
Switchor Tap
“Reconnex’s forensicscapabilities are a key pieceof my compliance policy.”
![Page 9: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/9.jpg)
CONFIDENTIAL - All RightsReservedReconnex Confidential
Reconnex Surveillance Types
• General Surveillance of all content, documentsand communications
• Document/Date/Time/Size/Watermarks/Sender/Recipient…
• Targeted Surveillance, powered by ReconnexDocument Registration
• Exact or Generic Phrases/Individuals…• “A Unique Solution to the Problem of False Positives”
• Can be operated on an ad hoc orscheduled basis
![Page 10: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/10.jpg)
05/02/06 Reconnex Confidential
What does Reconnex iGuard do?
• Captures, classifies and stores in real time all content going in orout of a network
• Alerts are generated for policy violations in real time
• Allows for forensic searches over captured content for issues thatyou may become aware of in the future
Gigabit network
![Page 11: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/11.jpg)
05/02/06 Reconnex Confidential
RCPE
The Reconnex Difference
Network Traffic RuleCreator
Real-TimeAlerts End User
HistoricalContent(RFS)
Content Summarization Look Up Table
Inbound capture(?)
Outbound capture
ForensicInvestigator
![Page 12: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/12.jpg)
05/02/06 Reconnex Confidential
Why don’t other products do this?
HistoricalContent(RFS)
Content Summarization Look Up Table
ForensicInvestigator
!!Because it’s HARD!!
![Page 13: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/13.jpg)
05/02/06 Reconnex Confidential
Easy to use Browser based access
![Page 14: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/14.jpg)
05/02/06 Reconnex Confidential
Drill down to actual content
![Page 15: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/15.jpg)
CONFIDENTIAL - All RightsReservedReconnex Confidential
Moments of Revelation from“Top Down” Work with Reconnex
![Page 16: Gigamon U - You Will See, Content Monitoring, Alerting, and Forensic Analysis](https://reader034.vdocuments.us/reader034/viewer/2022050816/54c1f4254a7959e3098b456b/html5/thumbnails/16.jpg)
05/02/06 Reconnex Confidential
www.reconnex.net