Does Sentinel capture passwords?
If Sentinel captures data in an email, telnet or FTP session containing a password that isn’t encrypted (i.e. the email is in plain text), that password can be found in the log files Sentinel creates. Passwords sent via the web, or in a news item are also available from Sentinel’s log files if the passwords were not encrypted. Passwords sent over a secure connection such as secure web (HTTPS) or secure telnet (SSH) are not obtainable from the log files. Because of the possibility of captured passwords, you should implement NT folder security where appropriate. You should also consider how capturing passwords fits in with your organization’s Internet usage and privacy policies.
