Content Integrity Control (CIC)

As part of the Advanced Security Module, Content Integrity Control (CIC) integrates with antivirus software and DLP (Data Loss Prevention) tools to permit or prevent file transfers based on your organization's policies, and supports compliance with PCI DSS. When the CIC Action is added to an Event Rule, any file that triggers the Event Rule is sent to an ICAP server for scanning. Combined with DLP and antivirus software, Content Integrity Control helps you prevent exposing your network to files containing malware, or share confidential/proprietary information.

When a file passes the CIC scan, EFT can perform other actions on the file, such as moving the file to another location. If the file fails the scan, Event Rule processing can stop, or other actions can occur, such as sending an email notification. You can create multiple CIC profiles to send files to different tools, or to look for different ICAP status codes or text in the ICAP header or body. The results can be captured in the database to generate reports.

Implementing EFT with CIC in your network ensures transfers are free of viruses/malware, employees are not sharing confidential/ proprietary information, no transfers contain nonpublic information, such as PHI (protected health information) and PFI (personal financial information), and helps you maintain compliance with PCI DSS requirements regarding DLP.

EFT’s CIC feature uses the ICAP protocol, the industry standard for antivirus and DLP tools. Any third-party content inspection product that supports ICAP can communicate with CIC. CIC works with the following antivirus and DLP servers:

Antivirus:

• Sophos
• Avira

DLP:

• Clearswift 5.0.0
• McAfee
• Broadcom (formerly Symantec)
• Forcepoint (formerly Websense)