Re: Varonis PoC

["Seth A. Shestack" <shestack () TEMPLE EDU>]

D’Ann,

We have used DatAdvantage for several years as well.
It gives us a great view into our data and we have it configured to match the sensitive and confidential data as 
defined by our classification policy.

Once configured (Varonis support and PS are wonderful tools) it requires very few cycles to maintain.
In addition to knowing where the data is, who owns and uses it, and how much there is we have found a couple of other 
benefits that occurred to us as we used it.

We have had very few cryptoware incidents however in the cases where it was missed by our conventional AD we caught it 
because of  Varonis daily alerts in our mailboxes (This is without purchasing the DatAlert add on package) that showed 
a user as having an atypical number of file touches.

When we get these alerts we check with the user to make sure they were not doing something purposefully such as backup 
or data migration.
If not, we looked a little closer at what was happening and a couple of time we were able to identify and intervene on 
cryptoware attacks.

Regards
Seth

From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chad Tracy
Sent: Thursday, February 07, 2019 4:23 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Varonis PoC

D'Ann,

Hope all is well. We use it at our institution and it doesn't take a lot of cycles to care and feed our Varonis 
instance. We use DatAdvantage as well. Once you get your reports set (their support is WONDERFUL, they will take all 
the time in the world to assist in making sure your reports are right) it is not to bad. Personally, I love it because 
it assists in the minimization of data... knowing what data elements are sitting out there, who owns it, and how much 
of the data is there really provides a clear picture. Second great benefit is that we can have reports sent to the data 
owners showing who has access to their specific departmental folders.

Hope this helps.

On Thu, Feb 7, 2019 at 3:42 PM Jackson, Ms. D'Ann <DJACKSON () tarleton edu<mailto:DJACKSON () tarleton edu>> wrote:
Hello!

We are considering a Varonis PoC.  Do any of you have experience with Varonis?
I’m specifically concerned about man-hours needed to monitor and maintain the system. I do realize this will depend on 
the modules installed.
I would be using the Varonis DatAdvantage solution for the PoC.

Thank you in advance for any information!

D’Ann Jackson
I.T. Policy Analyst III
Tarleton State University
djackson () tarleton edu<mailto:djackson () tarleton edu>
Office (254)968-9675

[cid:image001.png@01CFED2D.B938C390]
Confidentiality Notice: This electronic message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or 
distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.



--
Chad Tracy
Director of Information Security, Policy and Compliance
Bates College
207 786-6491