Data loss start-ups sell out

Page 2 of 3

Upon announcing its acquisition of Vontu in November, Symantec executives offered some details on plans to integrate the start-up’s line of data-loss prevention products into its own desktop, network and storage products. The two companies earlier this year struck a deal to embed Vontu’s detection engine into Symantec’s e-mail security gateway software; Symantec says adding Vontu’s capabilities to other products including its endpoint security offering is likely.

Adding Vontu’s ability to scan data resources across the network to seek out sensitive data would be beneficial additions to Symantec’s NetBackUp and Enterprise Vault offerings as well, officials say, to facilitate chores such as responding to e-discovery requests.

Trend Micro’s October acquisition of Provilla will result long term in integrating the start-up’s anti-data leakage capabilities into the security vendor’s desktop and gateway products, officials say, although in the near term Trend Micro will continue to sell Provilla’s LeakProof product as a stand-alone offering. The acquirer also spoke of extending LeakProof to mobile platforms.

Following its acquisition of Onigma late last year, McAfee used that company’s products as the basis of its foray into the anti-data leakage market in February. In October, McAfee acquired encryption and access-control vendor SafeBoot, and plans to launch a new data-protection product business unit based on the integration of these technologies, officials say.

WebSense, which acquired anti-data leakage vendor PortAuthority last December and earlier this year bought e-mail security vendor SurfControl, is ahead of the pack in integrating technology from acquired companies into its main product line. In July, WebSense announced it had integrated Port Authority’s content protection suite with its ThreatSeeker Web security product, and is currently fusing features from SurfControl’s e-mail security technology as well.

“It’s the combination of what you know about your employees combined with what you know about malicious activity on the Internet…we’re the only company that can set granular policies and enforce them around information protection,” says Leo Cole, WebSense’s director of marketing.

Cisco, via its IronPort subsidiary, is already putting anti-data leakage features into existing platforms, and is exploring whether it makes sense to also add content scanning to infrastructure offerings.

“Most of the customers we talk to want [anti-data leakage] integrated into their existing platforms,” says Tom Gillis, vice president of marketing with IronPort, which Cisco purchased in January. The company in September added anti-data leakage features to its e-mail security appliance, and says there may be opportunities to include variants of these capabilities to Cisco switches and routers as well.

IronPort is focused mainly on protecting data in motion – because that’s the strength of the company’s e-mail and Web security appliances – and believes there’s great benefit to being able to do fairly straightforward tasks such as blocking credit-card information from being sent in an unencrypted e-mail.