Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

6/22/2009
04:52 PM
Connect Directly
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Rollout: Egress Offers Rights Management As A Service

Switch encrypts data, restricts access, but only in Windows environments.

Transferring sensitive data from user to user or company to company can be difficult when there's no secure data-transfer solution in place. Even more difficult is restricting who can open the files once they have left your control. Data protection packages can be very expensive and don't always provide the protections required, which is why many small and midsize businesses haven't implemented a way to secure data and control who accesses it.

Egress Software Technologies' flagship product, Switch, strives to solve these problems in a lightweight manner at price individuals and small and midsize businesses can afford. Switch allows individuals to create secure packages containing files that can be transferred to online or offline recipients.

No doubt this sounds like many other secure data-exchange products on the market, such as PGP, Pkware, and Bcrypt, but Switch has a twist. It controls access to the secure packages through Egress' servers, making Switch a software-as-a-service offering.

Installation is straightforward. First, you must create an account, which is done through the downloaded client. Using your account's e-mail address, the service grants access rights and associates packages. Next, you can choose to install the browser plug-in or the full Switch client. The browser plug-in allows users to open secure packages, but they cannot create them; the full client allows creation and opening of secure packages.

Switch runs on Windows XP, Vista, or Server 2003 and customers' machines must have Microsoft .Net 2.0 Service Pack 1 installed. Although this Windows-only approach isn't unique to Egress' service, it does mean non-Windows businesses will have to seek an alternate route to secure exchanges.

In tests, after we downloaded the full client and entered our account information, we were up and running. The entire process took only a few minutes and was pretty easy. However, because there is no Mac or Linux client, we had to run Switch on a virtual machine running Windows.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29144
PUBLISHED: 2020-11-27
In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or e...
CVE-2020-29145
PUBLISHED: 2020-11-27
In Ericsson BSCS iX R18 Billing & Rating iX R18, ADMX is a web base module in BSCS iX that is vulnerable to stored XSS via the name or description field to a solutionUnitServlet?SuName=UserReferenceDataSU Access Rights Group. In most test cases, session hijacking was also possible by utilizing t...
CVE-2020-29136
PUBLISHED: 2020-11-27
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach (SEC-575).
CVE-2020-29137
PUBLISHED: 2020-11-27
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface (SEC-577).
CVE-2020-29135
PUBLISHED: 2020-11-27
cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).