Data Security Firewall
A Firewall That Understands Your Data
The increasingly relying of businesses on data and data-driven technologies, their business-critical data is being generated from a variety of different sources and being shared with a wide range of different enterprise stakeholders. And traditional next-generation firewall solutions just aren’t able to keep up with the task of monitoring and understanding each and every bit of all this data.
The Data Security Firewall is a leap ahead of the traditional Next Generation firewall with Data First Approach for security. It understands organizations data and takes appropriate security measures to prevent data exploitation. The Data security firewall is self-learning, smart security solution that learns various data patterns and user behavior to identify anomalies and internal threats.
The Data Security Firewall is a powerful and robust platform that accommodates various security solutions to help secure data and organization’s network. The Data Security Firewall is powered by GajOS Bulwark and backed by Contextual Intelligence Engine for a deeper data level visibility. Deployable On-premise and both public and private cloud infrastructure, Data Security Firewall caters to all sizes of companies across various business industries.
Data Security Firewall Architecture :


Features
-
Advanced Contextual Data Classification:
The Advanced Contextual Data Classification identifies the application and uses Deep Data Inspection to dive into the data context of the application. It identifies various data contexts within the application and breaks it into multiple data points for analysing them for possible data security policy violation and prevent data exploitation. -
Cloud based data security model for roaming users:
The Data Security Firewall with the help of an agent application Enterprise Cloud, routes all the traffic through the firewall at the HO and provides visibility on data transaction of the roaming user. e.g. in an instance where a roaming user with laptop connects to a public wifi, the Data Security Firewall Agent routes the traffic through the Head Office firewall and brings the roaming user under its protection. -
Context sensitive data leak prevention:
Using contextual intelligence, now you can define data leak prevention policies based on textual content inside the text-based file. The DLP can block data including files based on textual content it carries. For example, if in an organization, keywords like “tenders”, “Quotation” etc. are blocked, the users will be restricted to send mails or documents and attachments consisting of these keywords. The Deep Packet Inspection inspects the file content attached to a mail, being uploaded to a popular file sharing application, file sharing application, social media etc. -
Granular Contextual Policies:
Backed by Contextual Intelligence Engine, the Data Security Firewall generates deeper data context of applications that helps in setting up policies to allow or restrict data transaction based on contextual parameter at both application and data level. E.g. restricting ‘From’, ‘To’, ‘Subject’, ‘Email body content’, ‘Attachments’ etc. in an email applications and other parameters for various other popular platforms like SaaS Applications, File Sharing Applications, Social Media, Cloud Storage, Network, web browsing and more. -
Limit Social Media/Collaborative Apps to Business Use only:
The Data Security Firewall allows to set policies to restrict the use of popular personal email and social media ID and allow only corporate logins. E.g. one can allow only corporate logins for Social Media platform including LinkedIn, Facebook, Twitter, Instagram, etc. this allows marketing and the Human Resource team to access social media with restrictive/business usage. -
Data Visibility and control:
Backed by Contextual Intelligence Engine, the Data Security Firewall generates deeper data visibility by identifying the context of applications that helps in setting up policies to Control data transaction based on contextual parameter at both application and data level. E.g. restricting ‘From’, ‘To’, ‘Subject’, ‘Email body content, ‘Attachments’ etc. in an email applications and other parameters for various other popular platforms like SaaS Applications, File Sharing Applications, Social Media, Cloud Storage, Network, web browsing and more. -
Unaffected Endpoint Performance:
The data Security firewall works at the gateway level, independent of an endpoint application. The granular policies and security engine allows to take actions for data security right on the gateway firewall without the need to install any application of the laptop or computer device in the organization’s network. This results in unaffected endpoint’s processing resources and hence delivers security with undiluted device performance. -
SaaS data Control:
GajShield’s CASB (Cloud Access Security Broker) works on a proactive detection model to ensures that all the communication between the on-premise device and cloud application provider complies with organization’s security policies. It uses information from the Contextual Intelligence Engine, check for compliance with Data Leak Prevention Policies to detect and take necessary action against an unsanctioned use.
Data Security Firewall Solutions :