DLP Endpoint servers behind AWS ELB failing health check

Products

• Data Loss Prevention

Issue/Introduction

Does Symantec Data Loss Prevention support AWS Application Load Balancer (ALB)?

Are there any security recommendations that Broadcom provides when putting the AWS Web Application Firewall (WAF) in front of the endpoint servers to reduce the possibility of Denial of Service (DoS) attacks?

Resolution

No, Symantec Data Loss Prevention does not support AWS Application Load Balancer (ALB). AWS ALB expects the client to consume cookies sent by the LB (sticky sessions) and that is not handled in the product.

Broadcom recommends that you follow standard security practices to safeguard against DDOS and other security attacks. There are various methods like rate limiting, allowing/denying certain IP ranges, etc. You should work with your security team to choose the right set of tools, and services based on your specific environment (AWS, GCP, Azure, or Private n/w).