What Data is stored within SphereShield's Database?

The information that is stored in the Database varies and depends on the features deployed.

Below is a summarized list of data we store, categorized by features

Device Access Control:

- Usernames + SIP addresses + UPNs of users connecting externally

- Device information when being used to connect from externally: Endpoint ID, User-agent, device type. etc.

- Connection information: Source IP, time of registration, last login time, etc.

Ethical wall:

- Records of messages that were blocked by the Ethical Wall mechanism: Including source SIP, recipient SIP, time sent.

- Records of conferences that were held with users from the company: SIP addresses of users from the company that were in the meeting, time of the meeting

DLP:

- Records of messages that were blocked by the DLP mechanism: Including source SIP, recipient SIP, message body, time sent.

DLP Auditing can be disabled.

DDOS protection:

- Number of failed attempts for a user

- Source IP for these attempts

MDM:

- IMEI and UDID of devices

- The compliance status of devices

- Labels that are put on a device in the MDM

All records could be configured to be deleted after whatever time wanted.
The default is 30 days