Only CWAT prevents data extrusion through the channels below:   (1) External device connections How CWAT works CWAT monitors external device connections and usage of removable media, such as floppy disks, CDs, or other data storage. It inhibits printing or copying confidential data to the media based on the policies. Example When customer data are copied or printed illegally, CWAT generates an alert and rejects the operation. Shutout, Alert (2) Mobile devices How CWAT works Unauthorized operations are prevented by a software agent in mobile devices belonging to a CWAT-implemented network even when the device is disconnected from the network. All policy violations are reported when the mobile device is connected to the network. Example When a policy is violated by copying confidential data to a floppy disk while the laptop is disconnected from the network, CWAT reports the operation to the network monitor when the device is re-connected. (3) Unauthorized terminals How CWAT works An unauthorized terminal, such as a private laptop, is detected as an unregistered terminal by the software agent for the CWAT-implemented network, and the network connection attempt is rejected. Example An unauthorized terminal is detected and the network connection attempt is rejected. Shutout, Alert (4) Unauthorized operations How CWAT works Both the entire network and individual terminals are monitored based on policies applied to certain users or nodes. When a policy violation happens, an alert pops up, the operation is disabled, or the terminal is shut down, depending on the policy. Example When a policy is violated by connecting a USB memory device to a terminal, CWAT generates an alert and denies the connection. Shutout, Alert (5) Suspicious operations How CWAT works CWAT detects unusual operations using artificial intelligence which studies users' behaviors and determines what is unusual and suspicious Example When a CD-R drive is used outside of business hours, CWAT generates an alert Shutout, Alert   Architecture PAGE TOP