Start-up Aims Software at Secure Instant Messaging

Computerworld - Houston-based start-up IM-Age Software Inc. last week added its name to the growing list of vendors that are offering products aimed at fostering more secure use of instant messaging (IM) software within corporate networks.


The company said its IM-Age for Desktops tool lets IT managers capture, archive, audit and report on all IM traffic generated by public client software such as America Online Inc.'s Instant Messenger and ICQ products and Microsoft Corp.'s MSN Messenger.


IM-Age's tool, which users install on their desktop systems, also offers security features such as user authentication and an option that lets users encrypt both internal and external IM sessions. Prices start at $39.95 per user.


Richard Stiennon, an analyst at Gartner Inc. in Stamford, Conn., said IM-Age's tool and others already on the market address an area of growing concern for companies: how to control the unfettered use of public chat software on corporate networks while taking advantage of its benefits.


Some companies have run into major problems because of the inherent weaknesses of public IM clients, such as their susceptibility to viruses or the ease with which outsiders can snoop on conversations, he said.


The capabilities that IM-Age's software provides can help companies get a handle on their IM use and comply with the auditing and reporting requirements mandated by regulations such as the Gramm-Leach-Bliley Act, said IM-Age CEO David Pulaski.


For example, Calpine Corp. is using the software to store and audit IM messages in anticipation of regulatory requirements. The San Jose-based power generator has installed IM-Age's tool on 200 desktops in its energy trading group and plans to eventually roll it out to more than 3,500 users, said Stephen Webster, director of infrastructure engineering.


Calpine evaluated several products but chose IM-Age because it was compatible with all the IM applications being used within the company and was inexpensive and easy to install, Webster said.


"Just about every other vendor we looked at had either a proprietary client or proprietary middle-tier server, or it involved reconfiguring ports on the firewall," he said.


Other companies that offer products or managed services aimed at providing secure IM capabilities include WiredRed Software Inc. in San Diego, Communicator Inc. in White Plains, N.Y., Raytheon Co. in Lexington, Mass., and Omnipod Inc. in New York.


But while IM-Age is focusing on public IM software, proprietary client technology can offer more robust security features and is tuned better for corporate needs, said WiredRed CEO Allen Drennan. For instance, he said, WiredRed's ePop Audit and Reporting Server technology lets companies group users by role and department and is interoperable with existing directory structures.