What is our primary use case?
The most important use case for my clients in Fortra's Digital Guardian is that it consolidates two products into a single product: the DLP and data classification instead of having to implement and configure two solutions and take a long time to complete the DLP and then the data classification. If the DLP is not configured well, the data classification will not be well configured for sure. Additionally, the consolidation or integration between the two solutions in one solution gives the customer flexibility to monitor and utilize the software in a single dashboard, which is perfect for the customer.
Regarding industry compliance, Fortra's Digital Guardian helps to address compliance needs for customers, particularly in Egypt. It is mandatory for all banks, according to the Central Bank of Egypt, to have a DLP and data classification solution on-site. The main issue is that the solution must be implemented fully on-prem with nothing going to the cloud. The Financial Regulatory Authority (FRA) has also imposed similar regulations for FinTech companies, but not on a large scale. Here lies my concern because FinTechs are not large companies like banks and are not able to use Fortra's Digital Guardian, so I provide them with another solution called Safetica, which suits small to mid-sized companies and meets the compliance requirements according to regulations in the country. Additionally, I am waiting for the publication of a privacy protection law that may be released by the end of this month, which will emphasize the importance of DLP as a key cybersecurity solution.
What is most valuable?
The biggest advantage in Fortra's Digital Guardian is that two products in a single product can be configured, monitored, and troubleshot through a single dashboard. Another advantage is that they split the tool for database and the network. If the customer needs to do data classification or DLP for the database, they can purchase the license for the database only. If the customer needs to do it for the network, they can purchase the network license only. If it is an enterprise customer and they need to buy both, they can. However, one disadvantage is that they do not focus on small to mid customers. They start talking about 400 users and more.
Regarding real-time data visibility, it helps manage data security for the clients completely. I can do everything from a single dashboard, including gap analysis and instant response. I have over 15 years of experience as a technical person working hands-on with the product, so I have technical skills. The advantage of Fortra's Digital Guardian is that it includes a forensics tool and incident response, which allows me to determine incidents before and after they occur. In case of an incident, I can put a scenario and action plan, and if the customer gets hacked or attacked, I can identify where, who, how, and when this happened. That is a good advantage.
Fortra's Digital Guardian is very effective in detecting insider threats in the company, especially for low awareness customers who can send unexpected messages. As we all know, most attacks come from the inside, and more than 79% of attacks result from human error, not malicious intent, but it can be accidental. So if I can classify the data and put some restrictions, it is not a constraint on the employees inside but instead protects them and the company.
Speaking of cross-platform protection in Fortra's Digital Guardian, it streamlines data protection processes for the clients. The most important factor is to protect the customer's data, which is their real asset, regardless of where the data resides—on the cloud or on-premises, in static or in transit. What matters is how to protect that data, and I need visibility on it, which is very well managed within Fortra's Digital Guardian. Regarding the network, it can also be managed and controlled if it is split across on-prem or in the cloud, and I have complete and clear visibility on all assets.
The flexibility of deployment within Fortra's Digital Guardian is good, but it is not more than 90% of Arab countries, mainly Egypt, that allow on-cloud implementation. As such, on-prem solutions are the most applicable implementations fully fulfilled by Fortra's Digital Guardian.
What needs improvement?
The main concerns I have are pricing and the fact that it is handled through a distributor or reseller. Fortra does not have a local team here in the country, and they depend completely on distributors and local resellers. If the customer needs direct support from Fortra's Digital Guardian, it goes through a web interface or customer portal, which sometimes takes a long time for the customer to receive a response, potentially causing negative feedback.
For how long have I used the solution?
I am a reseller, not an end user, and I established an office for my existing or previous company in UAE and KSA a long time ago. I have used Fortra's Digital Guardian to promote it to some of my customers since 2023.
What do I think about the stability of the solution?
For stability, I would rate Fortra's Digital Guardian a nine because it proves to be very reliable.
What do I think about the scalability of the solution?
If I had to rate the scalability of Fortra's Digital Guardian, I would give it a nine. It is very scalable; if a customer buys 10 licenses and tomorrow needs 100, it can be done easily with no additional requirements.
How are customer service and support?
In my company, I completely depend on ourselves for customer support. I can provide the customer with my first line of support, and for severity one cases, if the customer is fully down, I have my way to escalate within Fortra to get support directly from the distributor. However, I would rate it up to a seven.
How was the initial setup?
I find the installation of Fortra's Digital Guardian is neither easy nor complicated; it falls in the middle range but is much easier than implementing Forcepoint DLP. I have previous experience in implementing Forcepoint DLP, which took about nine months for a full implementation and three months to complete the Boldon James setup. I could not do the data classification until the DLP was finished, so those projects took about a year. However, for Fortra's Digital Guardian, maximum implementation, from gathering information, sizing, and discussions, would not take more than three months if I do everything from scratch. I segment the customer department, such as marketing in one shot and sales in one shot, to ensure everything is checked and verified before completing the entire project.
The most difficult part about deployment is proper planning and sizing.
What was our ROI?
I see a return on investment and value for money with Fortra's Digital Guardian because my data is my asset. If my data gets encrypted, I will pay far more than the license costs for this software. I have many use cases where customers, due to a limited budget, could not purchase the DLP solution or Fortra's Digital Guardian solution, and when they faced an attack, their data got encrypted. For instance, a use case here in Egypt revealed they paid about 2 million dollars to retrieve their data. Therefore, there is massive ROI for this product and not only for Fortra's Digital Guardian, but for all cybersecurity solutions. This is one important point I emphasize to all the CFOs of any customer.
What's my experience with pricing, setup cost, and licensing?
It is not affordable for us in terms of the license because it is not something related to the license as much as from a company perspective; Fortra needs to put themselves on a scale for enterprise customers and do not give importance to small to mid customers.
Which other solutions did I evaluate?
Regarding whether Fortra's Digital Guardian is the leading one, I can draw comparisons with other tools, such as Forcepoint DLP, which only houses DLP and uses Boldon James or Titus for data classification. I have also worked with Safetica and Symantec DLP, but Fortra's Digital Guardian is the first solution I see that includes both, giving it an advantage to position it as a leader. However, competitors such as Symantec and Forcepoint have a strong presence in the market, so Fortra must consider adjusting its pricing strategy and focus on small to mid-sized companies to increase its market footprint.
What other advice do I have?
I have deployed Fortra's Digital Guardian mostly on-prem, which is the most common deployment model.
For Fortra's Digital Guardian, I have not deployed any solutions on AWS cloud. As I mentioned, AWS may have implemented their cloud locally in Riyadh or KSA, but I have not had the chance to do so. On the other hand, I have integrated many other products smoothly with Azure, AWS, and various third-party tools. The key issue is whether such integration is accepted from the customer side and according to governance inside the country. I must emphasize that 99% of my customers in Egypt are looking for on-prem solutions, with nothing going to the cloud.
I would summarize everything by giving Fortra's Digital Guardian a final rating of eight, primarily due to the pricing and their lack of focus on small to mid-sized companies, alongside the customer support aspects.