Using detection servers with Data Loss Prevention

Products

• Data Loss Prevention Enforce

Issue/Introduction

 

Resolution

Learn how to set and and configure detection servers for Symantec Data Loss Prevention (DLP) 15.

These resources cover DLP 15. For assistance with earlier versions of DLP , see the DLP online documentation.

Deploy detection servers

• Detection server memory requirements
• Adding a detection server
• Adding a cloud detector
• Server controls
• Server configuration - basic
• Network Monitor Server - basic configuration
• Network Prevent for Email Server - basic configuration
• Network Prevent for Web Server - basic configuration
• Network Discover/Cloud Storage Discover Server and Network Protect - basic configuration
• Endpoint Server - basic configuration
• Single Tier Monitor - basic configuration

Windows

• About starting and stopping services on Windows
• Starting a Detection Server on Windows
• Stopping a Detection Server on Windows

Linux

• Starting and stopping services on Linux
• Starting a detection server on Linux
• Stopping a detection server on Linux

Manage detection servers

• About managing Symantec Data Loss Prevention servers
• Enabling Advanced Process Control
• Editing a detector
• Adding an appliance
• Configuring an appliance
• Removing a server
• Importing SSL certificates to Enforce or Discover servers
• About the Overview screen
• Configuring the Enforce Server to use a proxy to connect to cloud services
• Server and detector status overview
• Recent error and warning events list
• Server/Detector Detail screen
• Configure Server - Edit Protocol Filtering

Advanced configuration

• Advanced server settings
• Server and detector configuration - advanced

Indexed Document Matching (IDM)

• Introducing Indexed Document Matching (IDM)
• Types of IDM detection
• Server IDM detection
• Agent IDM detection
• Two-tier IDM detection
• Supported forms of matching for IDM

Exact Data Matching (EDM)

• Introducing Exact Data Matching (EDM)
• Enabling and using CJK token verification for EDM

Additional information

• Server and Detectors event detail
• Configuring event thresholds and triggers
• Setting up scans of Box cloud storage targets using an on-premises detection server
• Renewing grid communication certificates for Discover detection servers
• Consider detection server network placement to support IP address matching
• Enabling server metadata detection
• Removing a server
• Enable token verification on the server to reduce false positives for CJK keyword detection
• About index deployment and logging
• About grid scanning
• Configuring grid scanning
• About log review
• Setting up OCR Servers
• Setting up scans of Box cloud storage targets using an on-premises detection server