service provider Box is adding new features and capabilities to its enterprise stack to ensure that IT administrators as well as individual business users have access to the widest possible range of security
and management options.
Among other things, Box is rolling out a native two-step log-in verification process to customers this week as well as introducing new tools that promise to boost the ability of individual business users to protect their personal information .
The heightened focus on enterprise security at Box comes as no surprise given that the company already provides cloud -based storage services to individuals at 125,000 businesses -- including 92 percent of the Fortune 500. When moving their content to the cloud with Box, IT professionals need to be confident that their business information is secure, noted Whitney Bouck, the general manager of enterprise at Box.
"With these new security and management features, Box continues to stay ahead of the curve, ensuring enterprise-grade security in the cloud without compromising user experience and productivity," Bouck said Tuesday.
Enhanced Security via Proofpoint Integration
Through a new partnership with Proofpoint, Box also will be giving IT administrators more control over how enterprise documents and other files are shared via Box while maintaining compliance with existing corporate policies governing the protected distribution of confidential information. The goal is to simplify the means whereby IT administrators identify restricted content and remove it from shared folders through the use of Box's new Reporting API.
Whenever an enterprise's content is being uploaded, the Box API will notify Proofpoint's security-as-a-service network, which will scan the file. In the event that Proofpoint determines that the distribution of the information would be in violation of corporate policy, it will alert the enterprise's IT administrator.
Box-Proofpoint security-as-a-service integration will enter the beta test phase during the current quarter and become commercially available during the first quarter of 2013.
"We are delivering an advanced layer of security capabilities that enable enterprises to have a full view of what is happening with sensitive information across their organization," said Proofpoint CEO Gary Steele.
Box's new security offerings are being added without charge on top of the advanced data encryption features already built into Box's enterprise-class cloud storage service. Customer data is already protected using 256-bit SSL encryption during transfers as well as 256-bit AES encryption when at rest -- and with the encryption keys securely stored at separate locations as well as frequently rotated.
New Monitoring Capabilities
Box's new Reporting API also will enable the company's business customers to incorporate Box activity logs into third-party Business Intelligence platforms from partners such as GoodData. The API monitors and reports on how employees collaborate with the company's internal and external partners, giving IT administrators a higher level of insight concerning how critical corporate assets and operational capabilities are actually being used at any given moment.
The new Reporting API is designed to notify enterprise customers about the occurrence of any unusual traffic spikes or user behavior by delivering actionable alerts to IT administrators in real-time.
"The ability to securely manage information and collaboration can be the difference between winning and losing in today's increasingly competitive business landscape," Bouck said.
Moreover, the cloud service provider rolled out a new advanced search capability that resides in the Box Admin Console. The new tool enables files to be located by file name, content type, date range, size and context as well as through bookmarked URLs.