Zlock^TM Architecture

Architecture

Zlock^TM gives IT departments full control over computer hardware resources and peripherals and provides means to recognize potential internal threats. The system allows for flexible monitoring and access rights management for every port/device (printer, USB, HDMI, DVD, etc) based on access policies. Users or user groups in the organization can be given full or read-only access to each physical or logical device. IT can monitor all access attempts, which are logged for review.

Architecture Overview

Client Module is installed on each workstation. It furnishes full user access control to the computer’s ports and peripheral devices, keeps transactions history in the event log for audit trail purposes and performs “shadow copying” of accessed/copied files

The module consists of Zlock Driver that manages access to ports and devices and Zremote Service plug-in that interacts with Administrator Zconsole (management console) and a remote “shadow copy” data storage.

Administrator Zconsole

Zlock comes with its own management console that enables system administrators to:

• install, update and delete custom modules
• create and distribute Zlock security policies
• monitor the status of client modules in real time
• view of events and data Shadow Copy
• collect data from all network devices in a consolidated report
• provide instant access to a port/device upon request, such as to enable/disable USB port and/or device.

Administrator Zconsole is compatible with other data security solutions, which allows for an enterprise centralized information security management. Access to the functions of the management console can be further segregated to define separate user groups for domain administrators and auditors.

Shadow Copying

Some information security policies require to implement audit trail capabilities for certain files/documents that were accessed, copied or otherwise manipulated. Zlock is designed to provide the “shadow copying” functionality to support such requirements. The information can be stored in Microsoft SQL Server or XML-files.