Prevent data leakage via free email accounts

Tags:
Email security
Security
Is there any way other than Rights management to prevent employees from sending confidential files using free email accounts (Yahoo, Google, etc). I can't disable access to all known free email accounts. There are just too many of them. We already use endpoint security to lock down USB drives.
1

Answer Wiki

Thanks. We'll let you know when a new response is added.

If the free email accounts were accessed via un-encrypted HTTP then you could prevent HTTP uploads using a firewall that recognized that.

However, since most of these are encrypted (HTTPS), it can be difficult.

The best way I know how to do it is to just control the sites that people access via a content filtering solution. For example, we use Fortiguard and it can lock down all known email web-based email sites with a click of the mouse. An alternative would be websense but it is pricey.

Hope that helps.

David Davis

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Yimster
    I understand your problem and you are right on not able to block all web e-mail. Even if you do block all web e-mail, some smart person will by-pass your firewall using proxy. If they use secured proxy than all get is whole bunch of encrypted message. Best way to fix this problem, do a company policy letter about using web mail and state the consequence if caught using web mail. I would than do a random check of my firewall and see if you can make an example of a person for violating company policy, like dismissal. I bet that will wake everybody up.
    0 pointsBadges:
    report
  • HCream
    Besides policy enforcement, it's also important to educate users about email etiquettes.
    1,250 pointsBadges:
    report
  • Buddyfarr
    SurfControl can also filter web based email. it connects with their database daily to download updates to the filter database and does a really good job. it works with ISA.
    6,850 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: