NextLabs announced enhancements to its Data Access Enforcer (DAE) product line, making it an even more comprehensive solution for data security challenges for the digital enterprise. DAE helps NextLabs customers control access to data through flexible policies that are dynamically enforced at runtime, allowing those policies to be enforced regardless of how the data is being accessed.
Also Read: Gnutti Carlo Group Names Cato Networks as the 2021 Innovation Award Winner
Some of the notable capabilities of DAE are field-level data masking and record level data filtering. Both features ensure only those with authorization can view the fields and/or records they have been granted access to. All of DAE’s policies are powered by NextLabs’ attribute-based policy engine, which controls access to data based on attributes of the data being accessed, the context of the request, and user identity. Policies are evaluated in real-time to segregate and/or mask protected data based on the current value of those attributes. These policies are centrally managed with activity logs that can be audited across all organization’s applications to simplify administration. The enhancements added in this release take these key strengths and make them even more powerful.
With this latest release, DAE added the following functionality:
- Format Preserving Encryption (FPE) when applying field level masking
Awareness of the Primary and Foreign Key relationship - More rapid deployment with simplified configuration and improved out-of-the-box integrations
- Support for containerization to accelerate deployment and reduce maintenance
- Row-level enforcement of insert/delete/update/select commands based on policy
Policy-based enforcement of table creation or deletion - Configurable user messages when policy enforcement restricts access to sensitive data
Incorporation of user geolocation attributes in data access policies - Certification of support for AWS RDS, Google Cloud SQL, and Azure SQL.
When implementing data access security policies across applications, organizations face the challenge of implementing the protection independent of UI and application without breaking the applications. With this release of DAE, NextLabs addresses this challenge with its enhanced FPE support and built-in awareness of the relationships between primary and foreign keys. When combined with DAE’s centrally managed policies that determine who, what, when, where, and how, to mask and filter field(s) based on attributes in real-time, organizations can prevent unauthorized access, protect data, and address compliance requirements all with a single solution. DAE’s out-of-the-box (OOTB) support for enterprise applications and databases allows this to be implemented with minimal impact to the existing systems and operations.