BSA Boole Server Appliance

The Celestix BSA appliance safeguards your sensitive data when being shared with staff, partners, contractors, customers or suppliers. It addresses critical challenges facing all businesses today by providing one solution for Information Rights Management, Data Leakage Prevention (DLP) and Managed File Transfer; all in a ready-to-deploy appliance. BSA ensures that data cannot be stolen or lost from the server or while in transit, and that only authorized recipients can use, edit or view specific files.

Enquire about this product

 

 

Minimize risk

Businesses of all sizes need to protect their confidential and strategic information when data is exchanged, discussed or edited. BSA provides a complete solution to minimize risk and protect critical data during file sharing and collaboration. The technology incorporates a range of advanced safety measures to keep confidential and sensitive data secure, including military-grade encryption (RC6 algorithm, 2048-bit).

Increase productivity

Upon successful login to the BSA server, authorized users can quickly and easily access data in a completely secure environment allowing them to work more efficiently. They are assigned selective and/or temporary rights to view or edit information. BSA ensures that information will not be forwarded, stolen or lost through malicious action or human error.

Control your data

File owners have the ability to authorize individual or group access to view, print, copy or modify data. Authorization can also be limited by location or by time. For example, an owner can restrict access to a file for a period of several weeks or even just a few seconds.

In addition, BSA keeps detailed file and user activity records to help organizations monitor and audit data usage for internal knowledge or compliance needs.

Protection without restrictions

Today’s business moves at the speed of information. The increasing requirement for efficient collaboration within your business and third parties (like suppliers and customers) means that high value documents are constantly in circulation. The challenge facing businesses today is to secure sensitive information while making it available to legitimate users when and where they need it.

The BSA platform solves this challenge by delivering:

• Information Rights Management - Ensuring the right people get the right level of access to appropriate files.
• Data Leakage Prevention (DLP) - Secure information sharing with unique features including dynamic watermarking, file streaming and anti-photo capability.
• Managed File Transfer - Military-grade 2048-bit encryption is applied to both file transfer and storage.

BSA lets authorized users control what, who, when, and how content is shared.

Access without risk

Celestix BSA keeps sensitive information inside a secure vault while making it readily available through a simple browser-style interface. The data inside the BSA vault can only be accessed by users who are given permission by the file owner. File owners define situation-specific access rights that include location, date, time, and group or individual user permission. External users (like customers, suppliers, advisers or partners) can be granted a temporary window to view information that is pertinent to them. Instead of providing them with the complete file, they access a time-limited, rendered image of the information. The data image cannot be copied, printed, downloaded or manipulated unless permission was granted. File owners can also grant them access to the source file which can be prominently and permanently watermarked so that leaked files can be immediately traced back to the source.

A tool for efficiency

Beyond providing a secure solution to handle sensitive data, BSA can improve the efficiency and productivity of your team by making filing, sharing and collaboration on documents quick and safe. Earlier versions of modified files can be saved automatically which makes change management and recovery simple and reliable. The server tracks user actions to make auditing simple; audit results can be used internally or to meet compliance requirements.

Powerful protection

Data protection is addressed on many different levels and incorporates real world experiences, including hacking, port scanning attacks and employee error/misconduct. The data is encrypted within BSA and the information in transit between the server and the client is not accessible to anyone - not even system administrators (unless they have been authorized by the file’s owner). The system is designed so that users are only aware of data that they’ve been authorized to view, access or edit. Other files are invisible, making unauthorized access impossible.

Technical Details

BSA is based on coded data transfer and storage using strong 2048-bit encryption. It enables risk-free resource sharing in an encrypted format because files are directly managed by the software and not by the operating system. The encryption system can be applied to disks shared through Windows Active Directory®.

Access is managed via a simple, familiar and intuitive Windows-like interface.
BSA’s software uses one single connection channel. The firewall can restrict all other connecting ports on the network with a single command used to harden the entire system within seconds to mitigate external threats.

Disaster recovery units can be configured to regularly update copies of the system’s primary storage units to servers in separate physical locations.

BSA Key Features

• Ready-to-deploy right out of the box
• Military-grade 2048-bit encryption
• File-level control and access restriction management
• IP filtering and file visualization streaming
• Anti-photo capabilities
• Block copy and Print Screen functions
• Permanent watermarking
• Automatic auditing and file access alerts
• Flexible user restriction policies
• Secure instant messaging
• Single-use temporary password
• Web UI for easy configuration and management
• Front panel display and Jog Dial for easy configuration and real time status display
• One button system recovery
• Install data protection in less than 15 minutes
• Remote drive service
• Automated housekeeping and file synchronization
• Load balancing, failover, mirroring and disaster recovery

Compliance Standards

GCSX No 6 Access Control

GCSX No 10 Mobile / Home Working

PCI DSS 2.3 Encrypt all non-console administrative access 

Requirement 4: Encrypt transmission of cardholder data across open, public networks

A.11.7 Mobile computing and teleworking