What does a network sensor record about employees?
About devices rather than people, but some of it can still identify a person. NetSenX records connection metadata from the segments it monitors: internal and external IP addresses, ports, times, volumes, the server names devices contact (from the TLSTLS: Transport Layer Security. The encryption that protects most internet traffic, such as HTTPS. handshake and DNS answers) and the names devices announce on the network. From that it builds alerts and a network map. It does not record message or file content and never decrypts traffic. Because a laptop called after its user, or an address assigned to one person's computer, can point to an individual, treat these records as personal data: inform employees, keep only what you need, limit who can see it and delete it on schedule. NetSenX stores customer data in the EU and publishes its data processing agreement with the full sub-processor list.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Do we need works council approval for network security monitoring?
- How do we see personal devices connected to the office network?
- Is it risky to let new employees use personal laptops on the company network?
- Can we get a list of every device that joined the office network this month?
- How can we tell if a remote employee's laptop connects through anonymising services?
Terms used here
- TLS (Transport Layer Security)
- The encryption that protects most internet traffic, such as HTTPS.