Request an enrollment bundle for a DLP cloud detector

Products

• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention

Issue/Introduction

You're ready to add a Data Loss Prevention (DLP) Cloud Detector and need to request an enrollment bundle.

Environment

Any of the following:

• Symantec Data Loss Prevention Cloud Detection Service for REST
• Symantec Data Loss Prevention Cloud Detection Service for ICAP
• Symantec Data Loss Prevention Cloud Service for Email

AND

Symantec Data Loss Prevention Enforce Server

 

This article does not apply to Cloud Managed (CloudSOC) Detection Servers. Those are automatically added into the Data Loss Prevention section of the Settings in the associated CASB tenant, so enrollment bundles are not issued. At the same time, in terms of Cloud Managed CDS for REST (CASB), a REST token is not provided. The token is only provided to enroll On-Premise managed (Enforce) CDS for REST servers to the CASB tenant. The CDS management type is selected during the configuration of the entitlement in the Enterprise Console. After the entitlement has been configured the management type can be verified in the "Subscriptions" section of the Enterprise Console. Cloud Managed management type is indicated by the cloud icon, On-Premise management is indicated by a little server/computer icon.

Cloud Managed:

On-Premise managed (Enforce):

 

For more information on this topic, refer to the following article: CASB CloudSOC with Symantec DLP Cloud (broadcom.com).

Cause

A Cloud Detector is a Symantec Data Loss Prevention detection service deployed in the Symantec Cloud. After Symantec has set up your detection service in the cloud, Symantec sends you an enrollment bundle. This bundle contains the information that you need to set up the connection from your on-premises Enforce Server to the detection service in the Symantec Cloud.

Resolution

1. If this is a request for a new Cloud Detector, you first need to follow the steps to submit the configuration details:
   1. Follow the steps given to submit that configuration via the DLP https://enterprise.security.com/ please see: Using the Enterprise Console
   2. Provisioning may take 1-2 business days. When the Detector is provisioned, a Welcome Email will be sent to the DLP Administrator provided when you submitted your configuration.
   3. The enrollment bundle will be included in the Welcome Email.
2. If you have completed your request (step A) and you did not receive a welcome email after 3-4 days, do the following steps:
   1. Please review your previous emails, look in "spam" folder and confirm if you received the welcome email. This should include the enrollment bundle.
   2. Check Status of your Service request in the Cloud Management Portal (CMP). Contact Technical Support with details of CMP portal to get additional info on your request.
   3. If you are unable to locate the welcome email, contact Technical Support - at this time, the only way to get a bundle re-issued is via a support case.
   4. After you have saved the enrollment bundle, register your cloud detector within 10 days of creation to enable communication between it and your on-premises DLP Enforce Server.
3. If this request is for a bundle that has expired, contact Technical Support to get a bundle re-issued.

Additional Information

See Activating the DLP Cloud Service via the Cloud Management Portal (CMP) (broadcom.com) for more information.