Getting started with a DLP / MIP Integration

Products

• Data Loss Prevention
• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Discovery/Connector
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Data Access Governance
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention for Mobile
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Protect
• Data Loss Prevention Network Web
• Data Loss Prevention Oracle Standard Edition 2
• Data Loss Prevention Plus Suite
• Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

The Symantec integration with MIP for DLP combines the classification and encryption capabilities of Azure RMS with the powerful data inspection features of DLP. Using this Symantec integration with MIP helps you meet your compliance and data protection requirements.

The below guide will walk through the complete integration with Symantec DLP and Microsoft Information Protection

For the full "Getting Started..." please visit the following link: Getting Started with DLP

Resolution

MIP Step 1: Profile 1 ( Authorizing Symantec Data Loss Prevention on the Microsoft Azure portal )

MIP Step 2: Profile 2 (Enabling MIP on the Azure portal for detection servers ( Enabling Detection Servers to decrypt MIP encrypted files ))

MIP Step 3: Creating an MIP credential profile for agents and on-premises detection servers

MIP Step 4: Configuring the Endpoint - MIP Classification action

MIP Step 5: To enable Symantec Data Loss Prevention to decrypt and inspect MIP-encrypted documents and emails via the Agent

MIP User Prompts

Additional Information

The following Tech Articles provides additional information for DLP and MIP: 

Difference between MIP “Classification Profile” and a MIP “Decryption Profile”

Endpoint Agent fails to authenticate to a single-tenant MIP application in Azure

Microsoft Information Protection (MIP) Classification Credential/Decryption Profile fail to retrieve authentication token from MS Azure AD