Zero Trust File Sharing®

Industry-first set of capabilities that enable a Zero Trust security posture for collaboration and file sharing.

*National Security Agency (NSA) Cybersecurity Information Sheet: “Advancing Zero Trust Maturity Throughout the User Pillar”

https://media.defense.gov/2023/Mar/14/2003178390/-1/-1/0/CSI_Zero_Trust_User_Pillar_v1.1.PDF

Users

Devices

Application & Workloads

Data

Network & Environment

Automation & Orchestration

Visibility & Analytics

Users

Devices

Application & Workloads

Data

Network & Environment

Automation & Orchestration

Visibility & Analytics

User

Continually authenticate, access, and monitor user activity patterns to govern users’ access and privileges while protecting and securing all interactions.

FileCloud Zero Trust File Sharing Implementation

• Integration with SAML, SSO – Leverage best in class authentication
• MFA support (Email, SMS, TOTP, DuoSecurity etc)
• RBAC for fine grained access control to provide “Just enough Access”
• Workflow recipe to evaluate authenticated access on a continues basis.
• Policy-based, authentication/access management and re-validation
• Fine-grained user policy control for file sharing and access
• Audit records to monitor user activity patterns.
• Granular permissions for better access control
• ReCAPTCHA to distinguish between human and automated access to the system

Devices

Understand the health and status of devices to inform risk decisions. Real time inspection, assessment and patching informs every access request.

FileCloud Zero Trust File Sharing Implementation

• Device Inventory
• Device Blocking & Remote Wipe
• Device Approval (workflow/policy)
• External MDM Integration
• Device Security Status
• Centralized Device Management

Applications & Workloads

Secure everything from applications to hypervisors, to include protection of containers and virtual machines.

FileCloud Zero Trust File Sharing Implementation

• Private Cloud Configuration
• Air-gapped Configuration
• ICAP Integration

Data

Data transparency and visibility is enabled and secured by enterprise infrastructure, applications, standards, robust end-to-end encryption, and data tagging.

FileCloud Zero Trust File Sharing Implementation

• AES 256-bit Encryption (data at rest)
• SSE-CPK & SSE-KMS Support
• Granular Folder & File Permissions
• Zero Trust File Sharing
• SSL/TLS Protocols (data in transit)
• NTFS Permissions Integration
• Custom DLP Rules (limit & manage file access)
• Public & Private File Sharing
• Workflow Automation (share approvals control)
• Metadata Tagging (user-defined)
• Automated Content Classification (with OCR support)
• Retention Policies
• Digital Rights Management (secure viewer, revoke permission, download limits)

Network & Environment

Segment, isolate and control (physically and logically) the network environment with granular policy and access controls.

FileCloud Zero Trust File Sharing Implementation

• Air-gapped Network Configuration (NIPR, SIPR, & JWICS)
• Custom DLP Rules (limit access/login)
• Multi-tenancy

Automation & Orchestration

Automate security response based on defined processes and security polices enabled by AI, e.g., blocking actions or forcing remediation based on intelligent decisions.

FileCloud Zero Trust File Sharing Implementation

• Custom DLP Rules (block access based on attributes/metadata)
• Allow & Disallow Access Lists
• Workflow Automation (block device access)

Visibility & Analytics

Analyze events, activities and behaviours to derive context and apply AI/ML to achieve a highly personalised model that improves detection and reaction time in making real-time access decisions.

FileCloud Zero Trust File Sharing Implementation

• Audit Trail
• Message Log (incoming and outgoing), Archival, & Search
• Alerts & Notifications
• SIEM Integration
• Zero Trust Network
• Default & Custom Reports

Hyper-Secure File Sharing & Sync

FileCloud is an enterprise-grade file sharing and sync solution:

• Zero Trust built-in to secure assets within and beyond the perimeter
• Compliance support and automation capabilities for CISOs and CTOs
• Deployment options (SaaS/self-hosted) and data governance for admins
• Collaboration and ease-of-access for end users

Tenets of Zero Trust*

Scrutinize Explicitly:

Use dynamic and static attributes to inform contextual, consistent, and conditional access to resources.

Assume a Hostile Environment:

Treat all users, devices, applications, environments, and NPEs as untrusted.

Presume Breach:

Consciously operate and defend resources with the assumption that an adversary has presence within the environment.

Never Trust, Always Verify:

Deny access by default; authenticate every device, user, application/workload, and data flow (with least privilege).

Apply Unified Analytics:

Apply unified analytics for Data, Applications, Assets, Services (DAAS) to include behavioristics; log each transaction.

*Source: Department of Defense (DoD) Zero Trust Reference Architecture, Version 2.0, July 2022.

Prepared by the Defense Information Systems Agency (DISA) and National Security Agency (NSA) Zero Trust Engineering Team

Secure Digital Assets with Zero Trust in FileCloud

“The network location is no longer seen as the prime component to the security posture of the resource.”

– NIST SP 800-207, Zero Trust Architecture. https://doi.org/10.6028/NIST.SP.800-207

Zero Trust moves cybersecurity beyond the static network perimeters – this paradigm focuses on securing users, assets, and resources over the network edge or segments.