Data Loss Prevention

 View Only

  • 1.  Symantec dlp Compatibility

    Posted Nov 28, 2013 05:48 AM

    Is there any dlp software compatibility list or charts ?Because I want to check dlp 11.6 or 12.0 has compatibility with firewall environment Fortigate and mail gateway PineApp or not.

    Requesting you to please assist.



  • 2.  RE: Symantec dlp Compatibility
    Best Answer

    Posted Nov 28, 2013 05:51 AM

    Hello,

    Just want to tell you that Fortinet is not supported at this point for any DLP versions. 
     
    and for PineApp check the below :
     
    Vontu Network SMTP Prevent is an RFC- 2821 SMTP Proxy server that integrates with any SMTP compliant MTA and can be deployed in either a reflecting (single MTA) or forwarding (multiple MTA) architecture.
     
    Implementations have been deployed with the following MTA's:
     
    CipherTrust
    IronPort
    Postfix
    Proofpoint
    Sendmail
    SonicWall MFT
    Symantec Mail Security 8300 Series
    Tumbleweed
    For the Network Prevent Server (Email) to integrate with an MTA, the MTA must meet the following requirements:
     
    The MTA must be capable of strict SMTP compliance. It must be able to send and receive mail using only the following command verbs: HELO (or EHLO), RCPT TO, MAIL FROM, QUIT, NOOP, and DATA.
    If you plan to run the Network Prevent Server (Email) in reflecting mode, the MTA must be able to route messages to the Network Prevent Server (Email) once and only once for each message.
     
    In practice, this means that the following statements are true:
     
    The MTA must be able to route outbound messages from your internal mail infrastructure to the Network Prevent Server (Email).
    The MTA must be able to route messages returning from the Network Prevent Server (Email) out to their intended recipients.


  • 3.  RE: Symantec dlp Compatibility

    Trusted Advisor
    Posted Nov 29, 2013 08:11 PM

    Keep in mind that SYMC cannot test every product out there.. so if it is not listed, it just means it has not been testged. So it all comes down to the product supporting or following the right standards

    The PineApp must follow the standard SMTP requirements.. it is very rarely that I have seen any MTA not follow the requirements. Especially when it comes to Email Prevent.

    When it comes to Web Prevent, they will need to support the ICAP requirements. If your Fortinet prodcut does support ICAP, then you would just need to enable it. It is pretty easy do, follow the enclosed steps to enable the ICAP protocol, then you just need to configure it.

    http://www.mydlp.com/how-to-use-mydlp-with-existing-fortinet-utm/

    Hope this makes sense.

    If this solves your questions please marked as solved.

    Ronak