Educause Security Discussion mailing list archives
Re: Varonis PoC
From: "Seth A. Shestack" <shestack () TEMPLE EDU>
Date: Fri, 8 Feb 2019 11:21:36 +0000
D’Ann, We have used DatAdvantage for several years as well. It gives us a great view into our data and we have it configured to match the sensitive and confidential data as defined by our classification policy. Once configured (Varonis support and PS are wonderful tools) it requires very few cycles to maintain. In addition to knowing where the data is, who owns and uses it, and how much there is we have found a couple of other benefits that occurred to us as we used it. We have had very few cryptoware incidents however in the cases where it was missed by our conventional AD we caught it because of Varonis daily alerts in our mailboxes (This is without purchasing the DatAlert add on package) that showed a user as having an atypical number of file touches. When we get these alerts we check with the user to make sure they were not doing something purposefully such as backup or data migration. If not, we looked a little closer at what was happening and a couple of time we were able to identify and intervene on cryptoware attacks. Regards Seth From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chad Tracy Sent: Thursday, February 07, 2019 4:23 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Varonis PoC D'Ann, Hope all is well. We use it at our institution and it doesn't take a lot of cycles to care and feed our Varonis instance. We use DatAdvantage as well. Once you get your reports set (their support is WONDERFUL, they will take all the time in the world to assist in making sure your reports are right) it is not to bad. Personally, I love it because it assists in the minimization of data... knowing what data elements are sitting out there, who owns it, and how much of the data is there really provides a clear picture. Second great benefit is that we can have reports sent to the data owners showing who has access to their specific departmental folders. Hope this helps. On Thu, Feb 7, 2019 at 3:42 PM Jackson, Ms. D'Ann <DJACKSON () tarleton edu<mailto:DJACKSON () tarleton edu>> wrote: Hello! We are considering a Varonis PoC. Do any of you have experience with Varonis? I’m specifically concerned about man-hours needed to monitor and maintain the system. I do realize this will depend on the modules installed. I would be using the Varonis DatAdvantage solution for the PoC. Thank you in advance for any information! D’Ann Jackson I.T. Policy Analyst III Tarleton State University djackson () tarleton edu<mailto:djackson () tarleton edu> Office (254)968-9675 [cid:image001.png@01CFED2D.B938C390] Confidentiality Notice: This electronic message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. -- Chad Tracy Director of Information Security, Policy and Compliance Bates College 207 786-6491
Current thread:
- Varonis PoC Jackson, Ms. D'Ann (Feb 07)
- Re: Varonis PoC Rob Milman (Feb 07)
- Re: Varonis PoC David L. Wasley (Feb 07)
- Re: Varonis PoC Chad Tracy (Feb 07)
- Re: Varonis PoC Richard Phung (Feb 07)
- Re: Varonis PoC Seth A. Shestack (Feb 08)
- Re: Varonis PoC Pifer, Michael (Feb 11)