Search

GlobalSCAPE Knowledge Base

Which antivirus (AV) and data loss prevention (DLP) tools does the CIC module in EFT support?

Karla Marsh
EFT

THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT, version 7.0.3 and later

QUESTION

Which antivirus (AV) and data loss prevention (DLP) tools does the CIC module in EFT support?

ANSWER

Globalscape has tested the CIC module operation with the following antivirus and DLP servers:

Antivirus:

  • Kaspersky version 5.5
  • Sophos
  • Symantec
  • Trend Micro

 EFT’s CIC module will *not* properly work with Symantec AV unless you edit/create the registry setting described here: https://kb.globalscape.com/KnowledgebaseArticle11375.aspx.

DLP:

  • MyDLP Community Edition Server version 2.2.32-1
  • Symantec DLP version 14.5.0.24028
  • Websense
  • McAfee
  • RSA
  • Clearswift DLP tested in v8.0.5

The following systems were not tested by Globalscape but work for customers (who confirmed proper operation):

DLP:

  • RSA DLP

Antivirus:

  • McAfee AV (specifically VSES, but we expect that covers the general statement "AV").

Tools other than those tested above are likely to work with the CIC module, which uses the Internet Content Adaptation Protocol (ICAP).

MORE INFORMATION

EFT Enterprise v7 and later has a "Content Integrity Control" feature, which is part of the Event Rule subsystem. Content Integrity Control allows event workflows to hand files off to a third-party content analysis tool and react according to the results of that analysis. DLP and antivirus/antimalware are common use cases.

The underlying technology used to integrate EFT with third-party analysis tools is ICAP, which is an industry standard protocol. Numerous DLP vendors support this natively, making integration with EFT a breeze. WebSense, Symantec (formerly Vontu), IBM Fidelis, RSA DLP, CodeGreen Networks, and others each support ICAP, and a number of them have been fully tested with EFT.

Your system may require that you edit/create the registry setting described here: https://kb.globalscape.com/KnowledgebaseArticle11375.aspx.

Although Globalscape cannot endorse a particular vendor or product, we can state that, based on EFT customer feedback, it appears that WebSense and Symantec are very capable and widely used DLP solutions.

Please contact your account representative to demonstrate EFT's capabilities, and further discuss your company's AV or DLP project.

Details
Last Modified: 3 Years Ago
Last Modified By: kmarsh
Type: FAQ
Rated 2 stars based on 7 votes.
Article has been viewed 34K times.
Options
Also In This Category