In Symantec DLP 14.0, there is a new detection feature: Remote IDM Indexer.
The Remote IDM Indexer is a standalone tool that lets you index your confidential documents and files locally on the systems where these files are stored, or from a shared network resource that is easier or preferable to access from a remote host. Using the Remote IDM Indexer greatly simplifies the IDM indexing process because it frees you from having to collect and copy all the files you want to protect to the Enforce Server.
The Remote IDM Indexer generates a secure (encrypted) pre-index file that you upload to the Enforce Server for final indexing and deployment to servers and endpoints. The Remote IDM Indexer is supported on Windows and Linux platforms and provides three configuration options: properties file, command-line interface (CLI), and user interface (Windows only).
Here we will introduce how to use the Remote IDM Indexer in DLP 14.0.
1. On the system where the confidential documents are stored, run the ProtectInstaller64_14.0.exe:
2. On the Select Components windows, select "Indexer":
3. After run the installer, the Remote IDM Indexer will be located on \SymantecDLP\Protect\bin
4. Run the RemoteIDMIndexerUI.exe, then select the source folder of the confidential documents for "Source URI", input the name of the pre-index file:
5. After click the 'Run' button, you will need to input a password for the index:
6. The password should be a strong one:
7. Check the "Progress" section for the index status:
8. After the index completed, there will be a pre-index file with the suffix prdx, you need to copy this file to the DLP Enforce, and put it in the folder SymantecDLP\Protect\documentprofiles
9. Log into the DLP Enforce web console, and select "Manage" - "Data Profiles" - "Indexed Documents":
10. Click "Add Document Profile":
11. Select "Import from a Remotely Created IDM Profile", the pre-index file will be listed under the "Select Remote IDM Profile":
12. Input the password of the pre-index file:
13. After save the IDM profile, the result will look like this:
Finally, you can update the policy related to this IDM.