Data Loss Prevention

 View Only
  • 1.  DLP Network Prevent and user licensing

    Posted Jun 05, 2013 07:14 AM

    Hi all,

    I have a case where I need to control 20 users working on LAN. There are much more network users than 20 but I need to control only concrete 20 ones. The DLP Network Prevent is licensed by numbers of users. I have the SMG as scanner and I will send messages to Network Prevent. What do the Netwok Prevent do when I buy less user licenses than there are users on the netwok? Will it control only first 20 network users and the others will only pass through or bloct these others? And is it possible to say SMG to send messages of only certain users to Network prevent and the others forward directly outside?

    One of the ideas how to solve this was to make two connectors in the MS Exchange - one for these 20 special users and the second for others. First one will send messages to Network Prevent (in forwarding mode) and second to SMG. But Exchange 2007/2010 does not support this solution.

    Thanks for any ideas.



  • 2.  RE: DLP Network Prevent and user licensing

    Trusted Advisor
    Posted Jun 06, 2013 03:36 AM

    Hi

     You need to check on your contract how your licensing is defined. Is it based on people using network, people monitored, or people on who you apply your policy (using Groups part of DLP policies with a DGM or a list of users). if it is the third one, you just need to include the list of users in your policies.

     

     Regards.



  • 3.  RE: DLP Network Prevent and user licensing

    Posted Jun 11, 2013 03:42 AM

    Hi,

    The license agreement speaks about "per managed user" licensing. On the other side the license guide for DLP Suite speaks about "network users". I suppose that the right licensing is "per managed user" and it means that I can select from the users I will apply the policy on and the right number of licensed users is the number of 20. From the view of the case mentioned above.

    Am I right?