You want to confirm how to setup WSS for the DLP Cloud Detection Service

Products

• Data Loss Prevention Cloud Detection Service
• Cloud Secure Web Gateway - Cloud SWG
• Data Loss Prevention Cloud Detection Service for ICAP
• Management Center

Issue/Introduction

You want to confirm how to setup WSS for the DLP Cloud Detection Service.

Environment

• DLP Cloud Detection Service for ICAP
• Web Security Service (WSS)
• Management Center

Cause

Configuration details need to be verified and you are not sure which steps to follow.

Resolution

There are 2 different types of setup or configuration for Symantec DLP customers using WSS.

1. If you are entitled to use the standard WSS portal, you should follow the instructions in the WSS support pages: Integrate With Symantec DLP Cloud (broadcom.com).
2. However, customers configuring WSS with Universal Policy Enforcement (UPE) need to follow additional steps, setting up their configuration via the Management Center: Symantec Cloud DLP Integration with WSS UPE (broadcom.com)

 

Additional Information

The following setting appears to be different depending on which option you are using:

• The "Traffic source" for DLP inspection as configured in standard WSS (without UPE) includes an option for "Scan all outgoing payloads".
• In WSS with UPE, after configuring the Management Center, the option above changes to "Scanning enabled".