InfoWatch Traffic Monitor

Overview

Traffic Monitor combines content and context based classification with event analysis, alerts, blocking, and an archive for investigations. That makes it useful to security teams that need to trace a suspected incident and act on it, rather than simply log activity. Its on-premises deployment is a natural fit for organizations that operate their own infrastructure; teams seeking a cloud-only DLP service should look elsewhere.

InfoWatch describes protocol agnostic capture across applications, custom systems, and cloud storage, including OneDrive and Google Drive. Its monitoring covers email, messengers, web services, file storage, workstations, printing, and mobile clients. The manufacturer also describes a government deployment monitoring flows across internal systems, external channels, and information management platforms. InfoWatch has worked on data security since 2003 and serves sectors including government, finance, healthcare, education, energy, manufacturing, retail, and telecom.

Key features

Classification and detection

Linguistic analysis and detectors for text, stamps, reference documents, forms, database exports, and graphic objects give teams several ways to identify sensitive material. Document intelligence classifies files by semantic context, while visual data shielding is designed to recognize sensitive images even when scans are too poor for their text to be read. This mix is useful where confidential information appears in varied document types, though organizations should assess its policies against their own data and workflows during a pilot.

Control and investigation

The Enterprise edition can block SMTP and MAPI email, webmail, internet traffic, cloud storage, FTP, removable media, and MTP devices. ActiveSync integration can intercept emails, attachments, and drafts being saved to personal phones without an agent or dedicated app on the device. Dashboards, communication and data flow graphs, and a shared event archive support incident investigation. Generative AI monitoring addresses services such as ChatGPT when employees use them to transfer data. Together these controls cover a broad set of potential exit routes, but the breadth will matter most to teams prepared to configure and manage policies across them.

Integrations and assurance

A described deployment integrates with ERP and CRM systems and automates checks that recipients are legitimate. InfoWatch states that Traffic Monitor holds FSTEC certificate No. 5034 and Russian software registry entry No. 10340. Those credentials may matter to organizations with relevant procurement or compliance requirements.

Pricing

Traffic Monitor is paid software with custom pricing through a commercial offer based on customer scale and requirements. InfoWatch provides a free pilot and helps configure key policies and scenarios, but the pilot has no stated duration. That makes it a practical way to assess fit before purchase, while leaving buyers to establish the evaluation period with the vendor.

Deployment sizing is based on daily traffic volume; requirements above 50 GB per day are calculated on request. Organizations should factor that sizing process into procurement, especially when evaluating larger or high volume environments. InfoWatch invites prospective customers to request a demo and lists [email protected] for technical support.

Platforms

The product is available for on-premises deployment, with listed platform support for Linux, macOS, Windows, and API integration. Endpoint, network, cloud app, removable media, and incident workflow controls are all part of its stated capabilities. This combination suits organizations that need to govern data across managed infrastructure and multiple transfer channels.

Who it's for

Traffic Monitor is best suited to larger organizations with sensitive data moving across internal systems, communications, endpoints, and cloud storage. Government and defense, banking, healthcare, energy, manufacturing, retail, and telecom are among its intended sectors. Its broad monitoring and blocking options favor security teams that need centralized oversight and investigation; organizations with simpler needs or limited capacity for an on-premises deployment may find its scope and custom procurement harder to justify.

Pros and cons

• Pros: Protocol agnostic capture reaches applications, custom systems, and named cloud storage services, giving teams visibility across varied data flows.
• Pros: Classification, blocking, alerts, and a shared archive connect detection with response and investigation.
• Pros: ActiveSync controls can monitor data saved to personal phones without installing an agent or app on those devices.
• Pros: A free pilot includes help configuring policies and scenarios, so teams can assess controls in their environment before buying.
• Cons: Custom pricing means buyers need a commercial offer to assess cost and compare budgets.
• Cons: Deployment requirements depend on daily traffic, and sizing above 50 GB per day requires a request, adding a planning step for high volume environments.
• Cons: On-premises deployment is less suited to organizations seeking a cloud only DLP product.

Alternatives

Cloudflare Data Loss Prevention is worth considering for teams that want a freemium option: its free plan covers 50 users, and pay as you go pricing is 7.00 USD per month with no user limit.

ManageEngine Endpoint DLP Plus offers a free edition for up to 25 devices and a paid Professional Edition at 795.00 USD per year, making it a more concrete option for teams comparing endpoint DLP costs and a capped free tier.

Trellix Data Loss Prevention protects endpoints, email, web, networks, and data storage, with on premises or SaaS management; consider it when those management choices are central to the decision.

FortiDLP has paid plans with a 100 endpoint minimum, a threshold buyers should weigh when comparing deployment scale.

Siberson Verikor DLP offers an Enterprise plan with annual or perpetual on premises licensing and annual SaaS licensing; it may suit buyers comparing those licensing terms.

Mimecast Data Leak Prevention is an alternative for buyers evaluating SaaS and cloud exfiltration monitoring, with its Professional plan including one detector and 30 days of historical activity.

Netskope One Data Loss Prevention is another paid DLP option.

Netskope One Private Access is a paid enterprise product with a free trial for teams comparing other Netskope offerings.

Browse Data Loss Prevention Software for more options.

Verdict

Choose InfoWatch Traffic Monitor if your organization needs on-premises oversight across many data channels, with classification, blocking, and investigation in one system. Its strongest reason to buy is the reach from document and image analysis to endpoint, network, cloud, and removable media controls. Look elsewhere if you need a cloud only service or a published price to make an immediate cost comparison.