Enforce Quick Install Guide for Windows

Products

Data Loss Prevention Data Loss Prevention Core Package Data Loss Prevention Discover Suite Data Loss Prevention Endpoint Suite Data Loss Prevention Enforce Data Loss Prevention Enterprise Suite Data Loss Prevention Plus Suite

Issue/Introduction

This is a Quick Install guide for the Data Loss Prevention Enforce Server

For the full "DLP Quick Install Guides" please visit the following link: DLP Quick Install Guides

Environment

Windows

Cause

The Enforce Server is a core component required for Data Loss Prevention.

Resolution

VERSION DISCLAIMER:
Please note that the following instructions are version agnostic, and can generally be used on any currently supported version. As such you will find several variables denoted such as "<DLPversion>" to indicate where a version number "should" be used. You will need to replace these variables with the appropriate version that you are attempting to use. Below are a few examples of such translations...

<DLPversion> = 16.0, 16.0.1, 16.0.2, 16.1, 25.1 or 26.1
<DLPfullversion> = 16.0.10000.60631
<ORACLEversion> = 193000 or 19.3.0.0
<JREversion> = jdk8u322-b06, 8u322b06, jdk8u422-b05-jre, jdk-21.0.4_7-jre, jdk-21.0.9+10-jre

Note: Username and Passwords provided below are for example only, choose your own values to match your company requirements.

Prerequisites
1. Download Installers: https://support.broadcom.com/group/ecx/productdownloads?subfamily=Data%20Loss%20Prevention
  1. DLP Platform Installer: Symantec_DLP_<DLPversion> _Platform_Win-IN_<DLPfullversion> .zip
  2. Oracle Client Installer: WINDOWS.X64_<ORACLEversion> _client.zip
    ** The Oracle Client MUST be installed if Oracle is not installed locally on the Enforce Server.
2. Install Java:
  Java AdoptOpenJRE Quick Install Guide for Windows
3. Install the Oracle 19c Client:
  Oracle 19c Client Quick install Guide for Windows
4. Create the Environment Variables:
  Creating Environment Variables Quick Install Guide for Windows
5. Open Firewall Ports:
  Quick Configuration Guide for Windows Firewall
Install the Enforce Server:
1. Extract the "Symantec_DLP_<version>_Platform_Win-IN_<full version>.zip" to any location, in this case we simply extracted to the desktop
2. Run the "EnforceServer.msi"
  
  C:\Symantec_DLP_<DLPversion>_Platform_Win-IN_<DLPfullversion>\Symantec_DLP_<DLPversion>_Platform_Win-IN_<DLPfullversion>\DLP\<DLPversion>\New_Installs\Release\EnforceServer.msi
3. Read and accept the license agreement
4. Set your Installation directory
  
  Note: You should use the default paths unless there is a specific need to modify the path.
  If you do modify the path, we recommend only modifying the drive and leave the normal path structure.
5. Set your Data directory
  
  Note: You should use the default paths unless there is a specific need to modify the path.
  If you do modify the path, we recommend only modifying the drive and leave the normal path structure.
6. Set the JRE Directory. Specify the path to the JAVA_HOME directory ("jdk8u322-b06-jre" in this example)
7. Specify which FIPS mode will be used.
  
  Note: FIPS should never be used unless you have a specific requirement for FIPS.
8. Select if you will use a new or existing user for the DLP Service user
  
  Note: If the MSI Installer creates this account, then the standard behavior is that the MSI will also remove this account when it is uninstalled.
9. Set the username and password.
  
  Username: SymantecDLP
  Password: <YourPassword>
10. Specify the Oracle Database connection settings
  
  Host: This should be the hostname or IP address for the Oracle Server. Be consistent about which one is used.
  Port: 1521 (default)
  Servicename: protect (Name of the Oracle Database that was created during the Oracle Installation)
  Username: protect (Oracle "protect" user account for the DLP Oracle Database as created during the Oracle Installation)
  Password: protect (Password for the Oracle "protect" user account for DLP as created during the Oracle Installation)
11. Set the password for the default DLP Administrator user
12. Set where Incident data should be kept
  
  Database: All Incident data will be kept in the database
  External Storage: Incident attachment data will be kept locally on the Enforce Server instead of the Database.
  
  Note: For Dev, QA labs or very small production systems, the "Database" option can be used. For a production environment we encourage the use of "External Storage". This will help keep the database size smaller resulting in faster and easier backups, restorations and migrations.
13. Set the Additional Local. This defines an additional locale for use by individual users. Locale controls the format of numbers and dates, and how lists and reports are alphabetically sorted. The default choice of "None" sets the Locale to English.
14. Select Install to being the Enforce Server Installation.
Access the DLP Web Interface:

Note: This may take several minutes for the services to come fully online for the first time
1. Open a browser on the Enforce Server and go to the following URL. "localhost" can be replaced by your Enforce Hostname or IP Address.
  
  https://localhost/ProtectManager/Logon
2. The default user is "Administrator". Use the password specified during the Enforce Installation process.
  
  Username: Administrator
  Password: <YOUR PASSWORD>
Add your DLP Licenses:

To add your DLP License, follow the steps found here
Solution Pack:

Proceed with adding a Solution Pack if you're going to add one (Must be done at this stage)
Install Detection Servers

DLP Detection Server Quick Install Guide for Windows