
In addition to the primary encryption/decryption functionality of VPS, the proxy component provides the following four additional data security features.
In addition to the login/password authentication used by SaaS applications, VPS can provide an additional layer of authentication independently or in conjunction with internal/corporate identity and access management (IAM) systems. When used with IAMs such as LDAP or Active Directory, VPS user management is eased by taking advantage of existing, centrally-managed user definitions and access privileges.
VPS can be configured to override user actions and prevent the transmission of sensitive information, even in unencrypted data fields. Take, for example, a company policy that credit card numbers should never be stored in the SaaS CRM application. In the event that an employee enters a credit card number into a free-text description field (which is not being encrypted by VPS), VPS will detect this sensitive element in the description field and mask it or remove it (as per the security policy) before transmission to the SaaS application provider.
The usage logging and reporting features of VPS allow a detailed review of all user actions within the SaaS application, including:
A typical example of user activity auditing would be to log access to the email inboxes of senior management, and to periodically review the logs to verify that the company's access control mechanisms were not bypassed.
VPS independently monitors SaaS application availability in realtime by monitoring the application's response times. This information can be used to verify vendor compliance with the SLA, and can also be used to generate alerts to IT staff when application availability drops below a predefined threshold.