what’s new data loss prevention 14. information is everywhere brings productivity, agility,...

What’s New Data Loss Prevention 14

Copyright © 2015 Symantec Corporation2

Information is EverywhereBrings Productivity, Agility, Convenience ……and Problems

Cloud Mobile BYOD

Your security slows me down

I expect an insanely great user experience

You don’t own the device

I will use the device I want

You can’t lock my device down

You don’t own the app

You can’t say no

You don’t own the infrastructure


..and the Cloud is a Risky Place for Work Data


Information Protection for the Cloud


What’s New in Data Loss Prevention 14

Unified ManagementExtending Data Protection for the Cloud

BoxOffice 365iOSAndroid

EmailWebFTPIM

USBHard Drives

Removable StorageNetwork Shares

Print/FaxCloud & Web Apps

File ServersExchange, Lotus

SharePointDatabases

Web ServersNetwork

Endpoint

Storage

Cloud & Mobile


Dozens of New Features in DLP 14!

14VMware Fusion & Hyper-V support

Exchange 2013 Connector

Removeable storage for Mac

Browser-based uploads for Mac

Cloud Storage for Box

Media Transfer Protocol (MTP) support

Disable print screen

Auditor role for DLP policy management

Clipboard paste monitoring

PDF custom metadata tags

Enhanced Indexed Document Matching (IDM) algorithms

Enhanced SharePoint Connector

Cloud Prevent for Microsoft Office 365

Improved keyword matching performance

Modernized Enforce console

Multi-language support for Endpoint pop-ups

Remote Index Data Matching (IDM) Indexer

Amazon Web Services support

Improved Exact Data Matching technology

40+ new international data identifiers

Cloud file sync and share (Endpoint Prevent)


DLP for Cloud

What it is

• Two new DLP products– Symantec DLP Cloud Storage (DLP 14.0)

– Symantec DLP Cloud Prevent for Microsoft Office 365 (DLP 12.5)

• Provide discovery, monitoring and remediation capabilities for cloud-based storage and email

Benefits

• Enables you to take advantage of the cloud with control and visibility

• Protects data regardless of it’s on-premise or in the cloud

• Easily and quickly extends current data loss policies and workflows to cloud apps


DLP Cloud Storage

Features

• Scan Box Business and Enterprise Accounts to discover and tag sensitive information in Box

• Enable user self-remediation from Box (visual tags) and the DLP Self-Service Portal

• Seamless integrates with Box and your current DLP system

Benefits

• Provides visibility into the sensitive files that users are storing and sharing on Box

• Quickly and easily extends current data loss policies and workflows to Box

New in DLP 14!


DLP Cloud Storage: Incident List


DLP Cloud Storage: Incident Details

File Location indicates the Username and the file location in

the users Box account



Collaborators and their roles are listed in the incident



Shared link information lists permissions assigned to the link


DLP Cloud Storage: Visual Tags in Box

Sensitive files are automatically tagged in Box

DLP Cloud Prevent for Microsoft Office 365

• Monitors and protects confidential email sent from your Microsoft-hosted instance of Exchange Online

• Seamlessly integrates with Exchange Online and your current Symantec DLP system

• Ensures email delivery via Symantec Email Security.cloud

BenefitsFeatures

• Lowers total cost of ownership by reducing on-premises servers and overhead

• Delivers faster time to value than on-premises solutions by leveraging IaaS

• Quickly and easily extends current data loss policies and workflows to Exchange Online

Copyright © 2015 Symantec Corporation


Cloud File Sync and Share

• Endpoint Prevent now monitors and prevents users from syncing sensitive files from their desktop to could storage sites

• Applications monitored by default include:

– Box

– Dropbox

– Google Drive

– Hightail

– iCloud

– Microsoft OneDrive

BenefitsFeatures

• Reduces risk of sensitive data loss

• Prevents sensitive information from being sync’d to cloud storage sites

• Improves end-user awareness and education of security policies


Improved Endpoint Agent for Mac OS

• Endpoint Prevent now monitors and prevents confidential data transfer between Mac endpoints and removable storage devices

– Save as and File copy operations supported

• Endpoint Prevent now monitors and prevents confidential data uploads using browsers on Mac endpoints

– Safari, Chrome and Firefox browsers supported

• VMware Fusion 7 support monitors data in use on a virtual Windows machine and prevents unauthorized file transfer

BenefitsFeatures

• Reduces risk of sensitive data loss Mac endpoints

• Prevents data loss from Mac endpoints

• Enables BYOD

DLP


Improved Endpoint Agent for Windows

• Chrome support monitors and prevents users from transmitting from Chrome browsers

• Microsoft Hyper-V support protects data in use on virtual Windows machines residing on a Hyper-V Server

• Media Transfer Protocol (MTP) support monitors and prevents data transfer between Windows desktops and mobile devices using MTP.

BenefitsFeatures

• Reduces risk of sensitive data loss

• Prevents data loss to mobile devices

• Enables BYOD


Improved Content Detection Technologies

• Improved keyword matching technology

• Exact Data Matching (EDM) now supports larger indexes (6 billion cells) and provides an enhanced algorithm– Previously supported 2 billion cells

(3x increase)

• Enhanced indexed data matching

• New Remote Indexed Document Matching Indexer allows data owners to directly fingerprint documents

BenefitsFeatures

• Up to 7x faster matching and significantly better performance with added keyword rules

• Provides faster detection and improved accuracy for extremely large structured data sources (e.g. databases)

• Up to 50x smaller indices with faster matching and no loss of accuracy

• Reduces data moved across network, improves security and fans-out fingerprinting policy


Key Takeaways

1 DLP 14 extends data protection for cloud storage and email

DLP Cloud Storage scans, discovers and tags sensitive information in Box

DLP Cloud Prevent for Microsoft Office 365 monitors and protects confidential email sent from Exchange Online

Endpoint Prevent now monitors and prevents users from syncing sensitive files to cloud storage sites with a new Cloud File Sync and Share feature

23

4

what’s new data loss prevention 14. information is everywhere brings productivity, agility,...

Documents