Symantec Data Loss Prevention Reviews

I am primarily using Symantec Data Loss Prevention for MIP labels, sensitivity categorization, and securing data such as confidential PAN card and Aadhaar card numbers. I also use it for keywords matching tied to customer-specific project codes and email policy configuration as per project requirements.

Symantec Data Loss Prevention has proprietary metadata and is well-suited for endpoint-level security. It stands out for supporting multiple protocols like email and SMTP without needing user profile login for endpoint agents. Once policies are downloaded to the local system, they function independently of a user's login. The solution helps enhance security operations when integrated with ServiceNow and offers robust incident response capabilities.

Symantec Data Loss Prevention (DLP) is highly effective in safeguarding sensitive data in cloud storage. Its granular features allow us to tailor implementations according to specific use cases and customer requirements.

Symantec Data Loss Prevention primarily targets confidential data. We utilize the indexing feature along with Endpoint Discover (EDM) to analyze consultation files. This involves scanning their content using OCR and managing data access accordingly.

It's important for information security due to the fact that it's a powerful solution. It defines sensitive secret data on the customer's environment and monitors for any breaches.

There are two things this solution has helped improve. 

In terms of the DLP, it can protect from data breaches in your company since you need to define secret and sensitive data in your organization. And the DLP solution monitors all of this data. For example, if you have personal data, you can define this data to the DLP, and then, if someone tries to send this data outside of your organization, this solution would prevent that data breach or generate an alert. 

The second way the DLP solution can help is by implementing best practices. For example, every organization has a business flow. This business flow can sometimes be wrong according to regulations. For example, with GDPR, if you are working with European customers, European clients, or European residents, you need to follow GDPR regulations. Or, if you are working with the payment industry or storing credit card data, you need to follow PCI DSS rules. This DLP solution can help customer organizations ensure they follow best practices.

It helps us meet requirements. There is no product that gives you 100 percent coverage, but it's quite an improvement. It gives us added value.

When it comes to operational costs, a lot of false positives have been eliminated. It's an ongoing activity.

It has good options for policy findings. You can do granular policy enhancements with multiple options. And the SMB blocking is a very good feature.

Other good features include 

• application control
• integration with other proxy servers
• data discovery.

And the dashboard is very user-friendly. The solution is very easy to use, if you know the baselines, concepts, and how to implement things, it's very easy.

In terms of detection, that's up to us to decide exactly what we want. Whatever we have found has been worth it.

Symantec Data Loss Prevention also supports Macs and Linux. It's up to you how you filter your traffic. A normal user's machine should not have Linux. Usually, that would be a server-level operating system, but there are different controls for different operating systems.

We use Symantec DLP because we have different kinds of users who have been moving around for the mobility of their work, they work either from office, home or other offices. So the encryption of this solution supports us in controlling the data within the organization and not getting any data breached. 

All of the features are really important, including DLP for the OCR and endpoint. It will be all of the combined features that will give you the strength to control the data. Every feature has its own uniqueness, different control and will help you to protect the data. 

I like how I have the possibility to check different channels with the same policy set.

The machine learning solution is very good. Many of our partners are not using mostly the machine learning function yet, however, the index document matching, the IDM, and the actual data matching function are the most useful. Those are very, very good functions of the DLP.

The OCR functionality could be better. We have OCR functionality. However, it is not as effective. It could be more effective. They need to work on the function that can catch PDF 5 and PDF 5 based on pictures, images, JPEGs, and so on, with text-to-all content. The main goal of this is to check those pictures against corporate policies.

I'd like it if, in DLP, the agent could have more detection capabilities.

Currently, many features can work only with Endpoint Prevention, Network Prevention, and Email Prevention. Those capabilities do not work on the Endpoint Prevent and Endpoint Detection. 

They need to expand the channels they check. It could be wider. So it should be able to check, for example, WhatsApp and mobile solutions, mobile communications, Facebook, et cetera. We're worried about data leakage on these channels. 

We used Symantec Data Loss Prevention for security purposes, mainly to handle confidential data and protect it from external interventions.

Symantec Data Loss Prevention helped us secure highly credible data of our customers, protect it from being copied, and safeguard it from external threats.

We use Symantec DLP for endpoint, network, and storage data loss prevention. Symantec DLP is deployed across multiple locations and departments, covering around 10,000 users. 

With Symantec DLP, we can identify where most of our sensitive data resides. By scanning the database and file server, we can find sensitive data and determine how people use it with the analytical view. For example, we discovered someone copying some sensitive data and project information during their two-week notice period. The SOP for any solution implemented in the infrastructure is placed in SharePoint. They tried to copy that information and send it to their personal email. We identified the potential leak and notified the leaders of the firm.

The endpoint DLP isn't something that provides 100 percent coverage. It is a strategic solution and a process by which we strengthen rules and policies for detecting and identifying sensitive information and how it can leave the company. The DLP solution doesn't provide total coverage, but it can protect about 70 percent of our daily process activity. It also reduces the time DLP admins spend on these tasks by about 20 percent.

Symantec also helps us meet our regulatory requirements. Symantec DLP has preset rules for PCI DSS compliance that we can use to monitor if any users are sending credit card numbers to outside parties. It has similar features for compliance with GDPR and other types of regulations.