Fidelis XPS 6.0
Strengths: Very comprehensive solution. Fantastic documentation
Weaknesses: Quite a few sensors devices to implement and manage
Verdict: Overall a very high quality enterprise network DLP solution. Recommended
The Fidelis XPS (Extrusion Prevention System) is a network DLP suite of modules that act as sensors to help analyse outbound information (network, web, email, etc) for sensitive data.
The XPS system contains several different sensors that can be pre-loaded onto Fidelis supplied hardware or provided as virtual appliances, which run on VMware vSphere 4.0.
Fidelis shipped three appliances as part of this review: CommandPost, the main console; Direct, a network sensor device; and Mail, an email-based sensor device. There are even more components that make up the suite, including Edge, Internal, Proxy, Connect and Scout.
Initial setup was fairly easy, but in order to take advantage of prevention capabilities, you will have to make use of a tap or span port, typical in any DLP setup. However with all of the devices, there will be quite a few ports and up-front capacity planning that has to go into the setup. You may find yourself minus quite a few cables and available ports after deploying this solution.
The number of sensors that you will need to deploy is going to raise the overall support costs and resources. However, that is also an important positive by means of very comprehensive coverage and performance. It will be worth the operational trade-off for organisations that demand coverage and performance.
The centre command console's interface is very intuitive and navigation around the various configuration options was seamless. The main dashboard presents all the current and past events in a radar format, which is definitely a new and interesting way to view the data.
Ultimately we were very impressed with the flexibility, features and overall configuration options for the solution as a whole. Once all of the sensors are deployed and policies created, the ability to detect and act on sensitive information via email, web and other network traffic, across all ports and protocols is very powerful. Enterprise options such as reporting, access control and flexibility and guidance is top notch.
The documentation available on the appliance interface is excellent. The help files contained a great combination of overview, best practice guidance and technical details. Basic email, phone and web support is available for 20 per cent of the purchase price and premium 24/7 support is available for 25 per cent of the price. Consulting services are available and the Fidelis website also offers various customer support options.