The Compliance Commander family of products from Intrusion Inc. protect SMBs from the leakage of sensitive customer information and unauthorized access to critical corporate DBs or file servers.

The base Compliance Commander Sentry offering is a three part product consisting of the sensor (a hardened Linux appliance) that is typically deployed just outside the firewall, the D3 (Dynamic Data Dictionary) server, and the Provider Management interface, which can manage all Intrusion products (including Database Defender, described below). The D3 Server examines selected customer data fields as stored within your customer database, and automatically configures the sensors to monitor all clear-text network messages for the inclusion of exactly that data (the data is communicated to the sensors via encrypted communications). The D3 Server can be configured to update the watched for data as fequently as needed. The vendor notes that the platform is not based on pattern-recognition; rather, the exact data as stored in your DBs is watched for and alerted. Both Provider and the D3 Server can be installed on the same Windows 2003 server box.

The sensors then watch all clear text transmissions (all encrypted communications are passed straight through), and when exact data matches are present, alerts can be sent by E-mail, SNMP trap, or through the Web-based administration console. Suspect traffic can generate prioritized alerts only, or can both generate an alert as well as block the data transmission.

Other features of the Compliance Commander Sentry system include fail-safe operation (wherein if the units lose power network traffic is allowed to continue to flow through the device unstopped); protocol independence (the sensors monitor all clear text data--including file attachments--regardless of protocol or port); and support for either pre-loaded hardware or software-based deployment.

Compliance Commander Database Defender is targeted specifically to the monitoring of databases for the prevention of unauthorized data access. Defender monitors all communications between network PCs and the DB or File Server, generating alerts in the following situations:

- When a new device that has not previously been registered and granted access attempts to access the DB or server

- When an approved device attempts to access data outside of a typical baseline volume range as defined by the Defender

- When a previously unknown/unregistered application attempts to access the data

Other Database Defender features and capabilities include chronological resource usage reporting (all activity for a particular device or application using the database or file server) and, in concert with the vendor's Compliance Commander Provider system, reporting that provides organization, division, and device-level views of resource usage changes across all monitored IT resources.

New to the Sentry portfolio is the inclusion of an E-mail encryption server. The Encrypted E-mail Server ships with sentry, and can be optionally setup to automatically encrypt E-mails that are received by Sentry and deemed to contain sensitive information before sending them to their destination. The vendor states that the encryption process does not require any additional client software.

The Compliance Commander product family is available now. Pricing is the same for both appliances, and is based on the number of customer records. Starting pricing is $7,950 for 25,000 records.

Contact Intrusion Inc. for further information.