Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Three-Tier Installation of DLP Product

Created: 25 Nov 2012 • Updated: 26 Nov 2012 | 6 comments
Language Translations
yang_zhang's picture
+9 9 Votes
Login to vote

Symantec Data Loss Prevention supports three different installation types:

three-tier, two-tier, and single-tier

Single-Tier: To implement the single-tier installation, you install the Oracle Database, the Enforce Server, and a detection server all on the same computer. Use single-tier installation only for testing or risk assessment purpose.

Two-Tier: To implement the two-tier installation, you install the Oracle Databse and the Enforce Server on the same computer. You then install detection server on a separate computer.

Three-Tier: To implement the three-tier installation, you install the Oracle Database, the Enforce Server, and a detection server on separate computers.

The Three-Tier installations require that you install the Oracle Client (SQL*Plus and Database Utilities) on the Enforce Server to communicate with the Oracle server.

Here are the steps to perform a three-tier installation:

1. Prepare three servers: server1 used for the Oracle Databese, server2 used for the Enforce, and server3 for the detection server.

2. Install Oracle and create the Symantec Data Loss Prevention database on server1. See the 'Symantec Data Loss Prevention Oracle 11g Installation and Upgrade Guide' for information about install Oracle Database.

3. On server2, you need to install Oracle Client.

Choose 'Custom' for the installation type:

4. For the product components, select 'Oracle Database Utilities', 'SQL*Plus' and 'Oracle Net':

5. Copy the tns configuration file from server1 (located on: \\server1\c$\app\Administrator\product\11.2.0\dbhome_1\NETWORK\ADMIN\tnsnames.ora) to server2 (copy to: \\server2\C:\app\Administrator\product\11.2.0\client_1\network\admin).

6. From server2, open command line, then, run the command: tnsping protect, make sure the command run successfully:

7. Install DLP Enforce on server2:

8. For the Oracle Database Server Information, input the hostname of the Oracle Database, which is the hostname of server1:

9. For the information of Oracle Database User Configuration, input the 'User Name' as 'protect':

10. Finish the installation of DLP Enforce on server2.

11. On server3, install Detection Server by run the same installation file of DLP Enforce, but, choose 'Detection' as Server Components:

12. Add server3 as a detection server on DLP Enforce Console.


Comments 6 CommentsJump to latest comment

Milan_T's picture

Screen-shot shows easy way to understand how to install enforcer and detaction server for DLP first time installation.

Good article.

Login to vote
Ambesh_444's picture

Nice article.. Thanks for sharing ..

Thumbs up for this article.


Thank& Regards,


"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Login to vote
kishorilal1986's picture


very nice but not complete as Enforce and detection installation not shown complete.

Login to vote
yang_zhang's picture

The three-tier installation is installing Oracle DB, Enforce Server and Detection Server on 3 servers.

And, the two-tier installation is installing Oracle DB and Enforce Server on one server, and, install Detection Server on another server.

So, the installation method of the Detection Server has no difference.

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
Login to vote
Baris Aydogmusoglu's picture

Thank you for your informative article!

Senior System Expert

Microsoft Exchange Server

Symantec Enterprise Vault

Login to vote
vinu283's picture

Good Article 

Login to vote