Architecture

Fidelis XPS was designed specifically for prevention. Its patent-pending technology employs a unique five-step process to analyze network traffic and stop data leakage. Combining accuracy with speed, the steps are executed in memory (not on disk) so that data leakage can be prevented in real time even on gigabit-speed networks.

Step 1. Packet Capture: Capture packets flowing across the network either out-of-band or inline on the network

Step 2. Session Reassembly: Reassemble Session packets in memory into sessions in order to conduct deep session and payload inspection.

Step 3. Channel Control: Analyze channels and automatically execute usage policies. Provides port-independent visibility and granular control to the channels and applications running on the network, giving an organization the ability to see and control what is occurring across the network and detect and contain traffic that creates significant data leakage risk.

Step 4. Payload Decoding: Analyze the sessions for document type rules and expose the content inside the documents for analysis. Extracting content into independent format for analysis.

Step 5. Content Recognition and Analysis: Multiple content analysis technologies. Can be logically combined. Sophisticated statistical and pattern-recognition content analyzers to identify critical or sensitive information based on its characteristics.

When a policy violation is found, Fidelis XPS issues an alert and can also drop the session or inject resets (based on the configuration), preventing a leakage from occur¬ring. In addition, Fidelis XPS is the only prevention solution that can be implemented out-of-band—preventing data leakage with no impact on network performance. Begin reducing the risks of data leakage immediately, without the overhead of extensive network reconfiguration. In addition, Fidelis XPS reports all extrusion attempts to its management console, CommandPost, providing a single point for alerting and a database of full forensic information for investigation of events.