Data loss prevention with pfsense
-
I need to configure pfsense to function against data loss:
Users upload files in their local network to the internet via mediafire, googe drive, email attachments, … (they can still access the site to download files to work), I do not know pfsense Is there such a function?
i'm from vietnam - 0919679920 -
PfSense is a firewall/router. It has no such function as protecting user data.
-
you could do some rules with snort.. But you have to make sure all traffic going through snort was in the clear.. So you would have to do mitm on all https sort connection.. Your best bet is just block services if your worried about users posting stuff up on say dropbox, etc.
You have to make sure user can not just throw the data on their usb stick. Or for that matter just email the data to outside addresses, and blocking of encrypted attachments, etc. Or I could just zip my confidential data and leak it out
An actual viable DLP program is very difficult to implement.. First place to start which is difficult for many companies is even classification of their data. So while you could build your own sort of system using with opensource tools and software.. It will a long and drawn process with many many hours of configuration and setup and then maintaining..
Not something you click install on pfsense package system and look here boss we have a fully functional DLP ;)
-
Thank you for this, however my company only needs internal data control given the internet environment. It's nice that pfsense can do this.
i'm from vietnam - 0919679920
