Microsoft Purview Data Loss Prevention Reviews

Microsoft Purview Data Loss Prevention is already set up in parallel to Forcepoint. We had some cases where Forcepoint was not able to see the issue, and Purview detected it. With Microsoft Purview Data Loss Prevention, it is much easier to have very good rules. Forcepoint does not have a knowledge of the organization, and you have to set up everything. When you are going to use Microsoft Purview Data Loss Prevention, most of the setup is already done by default as per your needs.

Microsoft is younger than Forcepoint in the DLP game. All the security operations are better defined in Forcepoint, while in Microsoft Purview Data Loss Prevention, you will have to use a specific workflow and then an application to release blocked emails. Out-of-the-box security operations are more adopted by the organization where I am currently working.

I have been using Microsoft Purview Data Loss Prevention since the start of 2024. The tool is used in my customer's company.

I am not satisfied with the technical support of the solution, and it is an issue that has escalated at the moment because we are getting support services from a partner.

Though I am not a specialist, the tool is quite expensive. One of the issues is that Forcepoint is mainly used for DLP, but the license is not an enterprise license, so the cost is quite high. One of the targets of the customer I am working for was to decrease this cost. Microsoft Purview Data Loss Prevention is a tool included in the E5 license plan. You don't have to pay for it directly, or you are paying, but it is inside the bundle, and in it, you also have the compliance tool of Microsoft Purview, which is as important as Microsoft Purview Data Loss Prevention itself, so you see just two parts in Purview. One is related to security and information protection, and the other one is related to compliance. The tool related to security is well integrated with Office 365, so it means you can classify information at the source or close to the source, which is something really important. All the security is based on data classification, and Office 365 is the main security bubble because, in the past, we used perimeter security. Now, we have moved to zero trust, and for zero trust, perimeter security is no longer sufficient, and that is why we moved to Forcepoint. We have Microsoft Purview, which fits our needs very well. Microsoft is moving to NIST Cybersecurity Framework (CSF) 2.0, and Forcepoint was closest to NIST Cybersecurity Framework (CSF) 1.0. Forcepoint's strategy is good, except for the data redundancy part.

It is difficult to identify and mitigate potential data leaks because we are putting the tools in one by one, and it depends on the type of project. The important fact is that we connect the way we handle the traffic on the endpoint. Endpoints are well managed by Microsoft Purview Data Loss Prevention. The tool's integration with the browser is also something important.

The company in charge of implementations for the project is a Microsoft partner. In our company, we had some troubles. It was not related to Microsoft Purview. What is good with Microsoft is that all the documentation is defined. We have a lot of staff and so on. The quality of support documentation is just great. We also have a perfect online community with blogs and documentation, but when you have to go with a specific blog inside the product, it becomes difficult.

The use of AI to enhance data loss prevention is not really our company's main subject, but I can say that it works. The main subject for our company is moving to the cloud and using a zero-trust model, so it is not a pure DLP project. We need to ensure DLP is there but in the cloud.

I recommend Microsoft Purview Data Loss Prevention to others. If you are in a hybrid mode where you have Microsoft, Amazon, or GCP, then it would be different. In cases where I use Microsoft's integration capabilities and I want to keep only one technology and one vendor, then in this case, it's better to have Microsoft Purview.

I rate the tool a seven out of ten.

The solution is primarily used for preventing leaks - to protect us from getting information out of the company.

The data loss prevention is great. It can prevent things like credit card information from being taken. The data protection is excellent. 

We can use the solution on Windows and iOS. We mostly use it with Office 365 and ingest data sources from Microsoft.

The solution is natively integrated and compliant across Azure. It takes into account critical regulations from around the world. We need to comply with various regulations. For our business case, it's very important. 

If we can prevent information from going out, eventually, when a regulator is asking about our security measures, we can show what we've been doing. It helps us to reduce the likelihood of potential fines.

We can educate users on how to handle sensitive data. By showing the records we keep and explaining the technologies implemented, we can provide awareness to our users. 

The solution offers good visibility into our environment. Our security team can use the product to monitor and track.

Its dashboard allows us to show compliance in real-time.

We've been able to reduce the time to action on insider threats. Security permissions are always being monitored. In general, it has saved us time and money when dealing with security. It's made us become more efficient. We've increased our compliance capabilities by 25%.

It could cover more solutions and technologies.

One of the challenges that we're facing now is how we can identify our critical information storage level, for example, via scanning or some other method. 

While I'm no longer using the tool, I used the solution for two years. 

Support is good.

Positive

In the past, I've used Forcepoint. I used it at a different company. Purview is easier to use.

The deployment is pretty easy. As with any implementation, there may be some challenges. However, it wasn't overly complicated. It depends on the complexity of the business. 

We had a small team that handled the setup. It was specifically the networking team.

We rely on business partners to help with the technical part to reduce the impact on the business.

We have reduced ROI in terms of time and money saved. 

The pricing is a little bit better when compared to others on the market.

I'm unsure if my current company evaluated other options. 

We are Microsoft customers. 

I'd rate the solution nine out of ten.

We use it for scheduled audit log retrieval on a monthly basis. We have strictly confidential SharePoint sites and requests come in where we have to find out the activity by users, such as who has viewed specific files or pages on a particular site. The logs contain activity by users and are part of Microsoft Purview. We can run search queries against the logs to get user activity across the tenant for a particular, confidential site.

The solution has tools for creating robotic process automation and workflows and we use them to reduce manual intervention and to handle some of the manual jobs. They make things much faster and more accurate. Of course, it involves much more testing and back and forth, but once you streamline an automated process, it's easy and accurate. It saves a lot of time because you don't need to have a manual monitoring system. Rather, the system identifies things and notifies you. It can save costs on the order of 60 or 70 percent.

With automation, the quality of insights has improved a lot. Manual processes have been replaced with something like a bot. It creates a more consistent pattern that gives you proper analytics and insights into how activities are being carried out.

Also, compliance can be viewed in real time to a certain extent. A small portion is not available in real time, but 70 to 80 percent of it is accessible in real time. Overall, Purview helps us to stay on top of compliance because it handles just about all the compliance factors.

One of the valuable features of Purview is the ability to create a legal hold on a user's account within the compliance portal. That's pretty useful when it comes to any litigation or if you want to redeem the content within a mailbox, OneDrive, or a generic public SharePoint site. If you want to retain the user's data until the case is resolved, you can use the legal hold feature.

Also, it's important that Purview can connect to iOS, Mac, and Android devices. With smartphone involvement, so many applications can now be accessed through them and it is important to apply Purview across operating systems and platforms.

Purview's natively integrated compliance across Azure Dynamics and Office 365 is also significant because within Microsoft 365 there are multiple applications. Irrespective of whether it's Dynamics or Azure, it's very important that it has native support. The data connectivity should be efficient enough to support and secure their own platform's data.

In addition, with varying regulations in different industries and matters, Purview lets you create rules and conditions based on industry standards around the world. That is important. Our company is in pharmaceuticals and the rules and conditions are different from other industries. It is important to be able to keep track of all these regulations and have a tool that is flexible enough to create the regulatory rules and conditions we need.

And when it comes to data loss protection, Purview has features that can recognize patterns and detect any sort of data loss, where the data is being transferred from its platform to a different one. The default settings that come with it are pretty nice for identifying data transfer or data loss across the platform.

It also comes with a lot of training materials, with use cases and examples, to help educate users and make them familiar with the tool.

A site can have different containers where you store data. We have always wanted to apply compliance, labels, and policies at the container level, rather than to an outer shell or at the site level. That is something we have been looking forward to and I believe Microsoft is already planning something like that.

I have been using Microsoft Purview Data Loss Prevention for less than a year.

It's a little bit pricey compared to competitors, but it's not too high. On a scale from one to 10, where 10 is expensive, it's a seven.

Overall, it's a very nice product and can handle a lot of applications.

The purpose of the solution is connected to the fact that we use the whole Microsoft suite. We use the DLP mostly, but we also use Defender which comes with the Microsoft license.

Up until now, we have used it to investigate everything, what's going on and whether people are sharing data, but mainly for monitoring. There are just a few things that are being blocked right now.

Purview has helped significantly to reduce the number of solutions we need to interact with each other. It's one suite for everything, which is very good.

We can also see compliance in real time. There's great visibility into data governance. That's one of the strongest points. We have 100 percent compliance with legal regulations around the globe. That's very good. It has notably improved our ability to stay on top of compliance. It's not all companies that are 100 percent compliant.

In addition, the time needed to respond to insider threats has decreased. It's very easy to know everything that's going on right now. I have all the controls to see what's being shared everywhere, around the world. If we see something that looks odd, we reach out to the folks involved immediately. It's almost instant. It has reduced our insider threat response time by more than 60 percent.

It is 

• very easy to use
• very easy to learn 
• very well documented

and the community is great as well.

The UX is very good. It's easy to get around inside that tool, and it's easy to get help.

I don't think it's very different from other solutions regarding the features, but because everything is on Microsoft and we use Azure, integration with the product is easier. That's the most important thing when you use many Microsoft products. It's easier to integrate everything in one place.

It's very important that it collects data from non-Microsoft products if we need information about what's going on with other OSs. If we're talking about personal computers, especially employees' computers, they are mostly going to be Windows. But if we're talking about servers, they are mostly Linux.

Purview is also built to take into account regulations from the US, Brazil, Europe, Asia-Pacific, et cetera. This is very important as well because you have to take into account the intricacies of each legal system.

Another good feature is the education it provides to users on how best to handle sensitive data.

There is no AIP for Linux systems. That's a setback. Another thing it's lacking is libraries to work with Python. It has libraries for C# and C++, for example, but not for Python and, these days, Python is very useful.

Power Automate can be improved as well. You can do plenty of things with it but it still doesn't do everything that you have in a full development language. It doesn't have that flexibility.

I would also like more integrations in Power Automate. Because so many things are a premium with Power Automate, you cannot do everything. There are a bunch of integrations that you have to pay more to use. That's not very good.

I have been using Microsoft Purview Data Loss Prevention for one year and three months.

So far, we have not had an outage. It seems like a 99.9 SLA.

It's a SaaS solution, so everything is in the cloud in one place. It's scalable if you're all Microsoft, but if you have Linux, I wouldn't say it's that scalable. You might have to do some work.

We have about 70,000 users. It's a global solution for everyone in our organization.

I have never used the technical support of Microsoft. But the documentation is good, very clear, very easy to use, and in one spot. We find whatever we are looking for.

For DLP, I used Symantec in another organization. In this organization, we used to use McAfee DLP. We switched mainly because of the price. Microsoft provides a bunch of tools for a fixed price, so there are other features that come with that suite of tools.

I believe we have seen return on investment because new engineers know their way around very fast. When I joined the company, it took me just one month to make my way around everything. It's easy to get our hands dirty and start working.

Despite some setbacks regarding the premium features for automating and integrating in Power Apps—you can only use the handiest stuff if you pay a premium price—there are many good things that come with the license that we already have. There is training as well; we can attend as much training as we want. They also provide good support. Overall, the pricing is okay.

The fact that Purview works across multi-cloud and multi-platform environments, is important, in spite of the fact that we mainly use Microsoft and Azure cloud. It's good if we plan, in the future, to move to another cloud service. Also, it's good that Purview can connect to iOS, Mac, and Android devices. The more tools we can integrate the better, because it enables us to scale very fast, even though right now we don't use it on iOS and those other systems.

Purview is still very new for us, even after one year. We're still looking into how things can be done. We're a global company and there are many policies and many different laws across the globe. Sometimes we can't do everything we could theoretically do with the tool. It's a powerful tool but we are still discussing legal matters across the globe.

Regarding maintenance of Purview, we just check if it's up to date and what updates Microsoft has provided. But we don't have to do too much.

I started working with this tool one year ago and I'm really impressed with its capabilities. I have worked in other banks and we had to use so many things to get one thing done, so I have a positive impression of Purview. I would definitely recommend trying it.

We use Microsoft Purview Data Loss Prevention for the entire life cycle and not just DLP. That is, we use it for discovery, classification, and DLP.

Earlier, our customers had no control at all over compliance, and confidential documents that were going out were not at all looked into. Microsoft Purview Data Loss Prevention has been a huge benefit to our clients in this regard.

I like the whole value proposition of Microsoft Purview, particularly the DLP and integration with external solutions.

Purview's natively integrated compliance across Azure, Dynamics 365, and Office 365 is important to us because it's all about compliance.

Organizations have various compliance policies including the regulatory policies that are defined within the organization and those for a particular region. Therefore, it is important to our organization that Purview is built taking into account critical regulations from around the world.

This solution enables our clients to show compliance in real time and has helped them in their meetings with compliance regulators.

Purview Data Loss Prevention provides presentations to educate users on how best to handle sensitive data. When the user doesn't know whether a document should be classified under a certain label, Purview will provide suggestions or will auto-classify the particular document. It has automatic labeling capabilities.

It's important that Purview provides data protection for iOS, Android, and data in other SaaS apps because our customers have heterogeneous environments. Purview perfectly fits into the heterogeneous space.

Purview has reduced the number of solutions needed to interact with each other and has coexisted with them. Some customers have completely replaced their solutions with Purview, and others have Purview for classification labeling and a third-party solution for the DLP verdict.

It has helped our clients to reduce the time to action on insider threats because it can be integrated.

I would like Microsoft Purview Data Loss Prevention to be on the source code or SQL databases. It is difficult to do classification and labeling when you have a third-party source code or a third-party Oracle database. It is seamless when it comes to Microsoft documents but is not so with third-party source codes. Microsoft needs to work on it a little bit more.

Everybody wants information protection, but not all of them can afford the M365 license. I would like Purview to be a standalone product or solution.

We've been working with this solution for the past three years.

It is definitely stable.

Our clients are medium to large organizations, and Microsoft Purview Data Loss Prevention has to be a scalable solution for them.

Overall, Microsoft's technical support is good, and I would give them a rating of six out of ten.

Neutral

The initial deployment is straightforward. We can quickly configure the policies, but the classification and labeling take time.

The solution does require monitoring.

Microsoft Purview Data Loss Prevention is part of a bundle and is not sold as a standalone product.

I recommend Microsoft Purview Data Loss Prevention and rate it at nine on a scale from one to ten.

A client was interested in Microsoft Purview Data Loss Prevention and Forcepoint LP solutions. They wanted to understand the difference between Microsoft Purview Data Loss Prevention and Forcepoint features.

Microsoft Purview Data Loss Prevention is known for its user-friendly interface, making it easy to configure the DLP system. It allows monitoring of data movement, ensuring sensitive data is protected. It ensures data is retained within the organization. 

Also, it's secure and can be integrated with an existing Forcepoint DLP setup.

Some main features are limited in comparison to other solutions. There is an issue where data transfer from a local to shared drive works, but shadow to local does not. Also, setting a whitelist for two pilot users often affects all users. There is no audit option in standard DLP, which is crucial for monitoring. Integration documentation is incomplete.

Microsoft Purview DLP implementation was almost a year ago.

Real-time working has issues, and the system sometimes doesn't operate as expected.

Microsoft Purview DLP shows strong scalability and availability.

The level of knowledge from customer service was limited, as seen when a representative seemed confused about integration processes.

Neutral

The client was already using Forcepoint DLP and wanted to compare it with Microsoft Purview Data Loss Prevention features.

With the E5 license, various features of Microsoft Purview Data Loss Prevention are available. It offers an economical solution compared to others.

The client was evaluating Microsoft Purview Data Loss Prevention against Forcepoint DLP to decide whether to switch or use both.

Based on my experience, I rate the Microsoft Purview Data Loss Prevention solution seven out of ten. Microsoft DLP is effective yet has room for improvement in some areas. Reviewing other available options and comparing the benefits can be helpful.

The solution's IDM (Indexed Document Matching), EDM (Exact Data Matching), and DCM (Described Content Matching) features have been most effective in identifying and mitigating potential data leaks.

We faced a performance issue with the tool when we didn't get alerts for file uploads.

I have been using the solution for eight months.

I would recommend the solution for larger companies.

The technical support team takes a long time to resolve issues. We contacted the support team for issues we faced while migrating from another DLP to Microsoft Purview DLP. Although the support team said they would address the issues within 24 hours to a maximum of two days, they took around four to five days. The waiting period for the support team is longer.

Neutral

I previously worked with Symantec DLP. I prefer Symantec DLP over Microsoft Purview DLP because Symantec is easy to connect and navigate. Comparatively, managing and conducting investigations on Microsoft Purview DLP is difficult. Sometimes, Microsoft Purview does not work as expected.

The solution’s initial setup is easy.

The solution’s pricing is reasonable.

It is easy to upgrade the solution.

Overall, I rate the solution an eight out of ten.

Our approach involves issuing warnings when users send over twenty sensitive messages, such as bank account numbers, across various channels like email and chat.

Having visibility into the quantity and reasons behind the data we send out is crucial. This is particularly significant when dealing with sensitive information like Social Security Numbers, especially in the context of desktop backups. This newfound visibility not only contributes to time and potentially cost savings but also enhances credibility. Leveraging blocking in our policies serves as an effective remediation measure. When a policy is in place, it acts as a gatekeeper, preventing users from carrying out actions that go against the specified policy, even if they intend to do so. This proactive approach ensures a robust defense mechanism.

The most valuable features are identifying sensitive data and issuing alerts. This was further enhanced by email notifications sent to our secondary mailbox, providing comprehensive oversight of website activities. These features have proven to be beneficial in our role within the financial sector, where safeguarding customer data and ensuring overall data security are top priorities. Ensuring secure connectivity to iOS is vital, with enabled features on endpoints being essential for data security. The importance of data protection expands to the cloud and various platforms, especially in the context of deploying applications across multiple environments.

There are still inconsistencies in the functionality of mail tips and related features. Occasionally, the system fails to recognize words and content accurately in applications like Word and Excel, with effectiveness contingent on simplification. There is a need for improvements, particularly in ensuring that file-based recognition is more reliable and comprehensive.

I have been using it for two years.

I would rate its stability capabilities six out of ten.

I would rate the scalability abilities seven out of ten.

The support is commendable, but there are notable issues with the product, particularly concerning exchange clients, which adds a layer of complexity. I would rate it seven out of ten.

Neutral

I previously worked with Symantec.

The initial setup proved to be somewhat complicated due to the challenges and issues we encountered.

During our initial implementation of DLP, we encountered several challenges, particularly with issues like malfunctioning mail tapes and difficulties in downloading policies correctly. Despite ongoing efforts by the team to address these issues, there were limitations in policy functionality, with successful implementation observed primarily on the web client rather than the client side.
It took nearly six months to conclude and finalize various aspects.

The ROI is inherent in the existing license, making it unnecessary to incur additional expenses for another tool.

Overall, I would rate it seven out of ten.

We use the product to set up policies. 

Microsoft Purview Data Loss Prevention's responses are faster. Its installation is also reliable. The security score helps with the security part. 

Microsoft Purview Data Loss Prevention's licensing is expensive.

Microsoft Purview Data Loss Prevention is stable. 

The tool's scalability is great. 

We have dealt with Unified and Premier support. Whenever I raise a ticket, I start researching the answer as well. 

The tool's implementation is easy. 

We have seen ROI with the product's use. 

I have Microsoft Purview Data Loss Prevention on Mac, but I do not use it daily. 

We use GCP, and it is good that the product can expand to it. 

It is good that the product goes automatically into the sensitivity limits of a country. 

Microsoft Purview Data Loss Prevention saves time in the implementation area.

I rate the product an eight out of ten.  

I use the solution to protect files with personal information.

The product is easy to configure. It protects personal data. The product can connect to servers on-premise.

The solution should provide better integration with other systems.

I have been using the solution for a long time.

The product is very stable. I never had any issues with the product. I rate the stability a nine out of ten.

The solution can be quickly scaled with ease. More than 5000 people are using the solution in our organization.

I contacted support regarding metadata. The support took one to two weeks to resolve my query.

Neutral

We used Security and Compliance Center, but it did not produce accurate results like Microsoft Purview.

The initial setup is very easy. We just had to go through Microsoft’s documents and understand the best practices.

I did the deployment myself without anyone’s help. We have the solution deployed on around 4500 endpoints.

The product has the best price-to-performance ratio. Its pricing is better than other products.

Only people with permission can access the document when we share a document in Microsoft Teams. We need to have good business processes to use the product. It is important to me that Purview can connect to iOS, Mac, and Android devices. If Carbon Black is installed in our system, we must put it on passive mode while using Microsoft Purview.

The product is very well integrated. We do not have to pay more to make the best use of the solution. Everything is part of the E5 license. Storage costs less compared to other products.

It's very important for me that Purview was built taking into account critical regulations from all around the world. Since we share a lot of information with people from other countries, respecting their compliance and regulatory systems is crucial.

Educating users is very important. Irrespective of whether it is an employee, partner, or consultant, people should be aware of how to protect themselves and the company while they work. Change management is very important.

I use DLP on my iPad. I have an iPhone, and I like to have access to different systems. It's very important to me to have the flexibility to choose my endpoint. Purview has helped reduce the number of solutions I need to interact with because it integrates everything and has become an integral part of my workday.

Many employees would use office computers for tax filing and other personal needs. I was working for the regulatory and governance department. When I configured Purview and scanned all the data, I could see all the information of the employees.

I automate everything with metadata. If we choose the metadata option for financial documents, Purview will associate these documents with a level of confidentiality. The AI’s automation speed and accuracy of risk detection are good, but to use the features well, we should know our processes very well.

The solution's AI is very sharp. We need to protect data and confidential documents. The product makes me feel secure. It ensures that the people outside our organization don't have the right to access our data. We can also automate email alerts. Microsoft releases regular updates to protect personal data. The solution’s regulations help organize our company.

Overall, I rate the solution a nine out of ten.