Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


RSA Takes Tablus

EMC unit picks up data leak prevention specialist for an estimated $40 million

EMC's RSA security division continued on its acquisition tear today, announcing its intent to buy content monitoring specialist Tablus for an undisclosed fee. (See RSA Snaps Up Tablus and TeliaSonera Launches Yoigo.)

The move follows EMC's recent purchase of authentication specialist Verid and last year's acquisition of Network Intelligence. (See EMC Secures Verid, EMC Buys Verid, and EMC Pockets Network Intelligence.)

Although the terms of the Tablus deal have not been revealed, the financial value of the acquisition is unlikely to match the $175 million spent on Network Intelligence, which had 700 customers and $25 million in funding.

Tablus, in contrast, has $23 million in funding, and around 30 customers, although these include the likes of Domino's Pizza, Microsoft, and financial giant Barclays.

Analyst Nick Selby of the 451 Group estimates that RSA spent around $40 million for Tablus, adding that the vendor has been on the lookout for this type of technology for almost a year. "This was a gaping hole in their strategy," he says. "They did look at a lot of players [in this space], but were slowed down by the fact that there were so many."

Tablus is one of a growing number of vendors, including Vontu, Vericept, and Cisco acquisition IronPort, that filter outgoing emails for potentially damaging leaks. (See Content Filtering Options Proliferate, Vericept, Vormetric Team, Reconnex Connects With $5.8M , Reconnex Intros 2600S, Vontu Brings Funding to $25M, and Cisco's Security Salvo.)

RSA's chief strategy officer Dennis Hoffman told Byte & Switch that all of Tablus' 65-stong workforce will be joining RSA when the deal closes in Q4, including CEO Anne Bonaparte and her management team. "Everybody is going to be coming over on day one," he says. "This is not a cost synergy-driven acquisition; this is a product and technology-driven acquisition."

Tablus's flagship email monitoring product is Content Alarm, which was launched in 2005, although the vendor also offers software for scanning sensitive content on laptops and desktops. (See Users Confess Security Fears , Laptop Venn & Zen, Portable Problems Prompt IT Spending, Laptop Encryption the Service Way, and Users Go for Data Lockdown.)

EMC is now planning to build Tablus's software into its Infoscape offering, which is at the forefront of the vendor's Intelligent Information Management (IIM) strategy. (See EMC Vows More for Infoscape, EMC Intros Services, and EMC Peels Back IIM.) IIM, which ties in with the vendor's Information Lifecycle Management (ILM) efforts, is basically an attempt to lock down users' data. (See EMC Intros IIM.)

At this stage, there is still no clear roadmap for combining the two technologies, according to Hoffman. "It's not clear if we're going to be building Tablus into Infoscape or Infoscape into Tablus," he says, adding that there are no plans to discontinue Tablus as a standalone product.

Infoscape is now fast resembling a patchwork quilt of recent EMC acquisitions, and already contains repository management software from Documentum, discovery capabilities from SMARTS, and Disk Xtender technology from Legato. (See EMC Cops Documentum, EMC Gets Smarts, EMC Acquires Smarts, and EMC Refreshes NAS, SAN.)

EMC is also looking to combine Tablus's software with its existing offerings around encryption and key management. (See Cisco, EMC, MS Help Out Uncle Sam, EMC, Cisco Team for Encryption, Bank Uses EMC, and Mark Lewis, CDO, EMC.) "Tablus's products give us a framework within which to position and sell our encryption capabilities," says Hoffman, although he was unable to provide a specific timeframe for this integration.

— James Rogers, Senior Editor Byte and Switch

  • Cisco Systems Inc. (Nasdaq: CSCO)
  • EMC Corp. (NYSE: EMC)
  • EMC Legato
  • EMC Smarts
  • IronPort Systems
  • Microsoft Corp. (Nasdaq: MSFT)
  • Network Intelligence Corp.
  • RSA Security Inc. (Nasdaq: EMC)
  • Tablus Inc.
  • The 451 Group
  • Vericept Corp.
  • Verid Inc.
  • Vontu Inc.

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Oldest First  |  Newest First  |  Threaded View
    COVID-19: Latest Security News & Commentary
    Dark Reading Staff 10/23/2020
    Russian Military Officers Unmasked, Indicted for High-Profile Cyberattack Campaigns
    Kelly Jackson Higgins, Executive Editor at Dark Reading,  10/19/2020
    Modern Day Insider Threat: Network Bugs That Are Stealing Your Data
    David Pearson, Principal Threat Researcher,  10/21/2020
    Register for Dark Reading Newsletters
    White Papers
    Current Issue
    Special Report: Computing's New Normal
    This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
    Flash Poll
    How IT Security Organizations are Attacking the Cybersecurity Problem
    How IT Security Organizations are Attacking the Cybersecurity Problem
    The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    PUBLISHED: 2020-10-26
    An issue was discovered in KDE Partition Manager 4.1.0 before 4.2.0. The kpmcore_externalcommand helper contains a logic flaw in which the service invoking D-Bus is not properly checked. An attacker on the local machine can replace /etc/fstab, and execute mount and other partitioning related command...
    PUBLISHED: 2020-10-26
    This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.
    PUBLISHED: 2020-10-26
    A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.
    PUBLISHED: 2020-10-26
    The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the ur...
    PUBLISHED: 2020-10-26
    SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) is an off node multiarray manager web application and remains isolated from data on the managed arrays. HPE has provided an update to HPE StoreServ Management Console (SSMC) software* U...