Symantec DLP facts

Created: 23 Oct 2009 | 7 comments

mihai.dobos

0 0 Votes

Hello,

Can someone direct me to a detailed technical data sheet for DLP products?
I'm interesed in:
- 64-bit OS support for monitoring/disocover/mgnt/etc servers
- support for agents on mobile devices, like blackberry or symbian
- latency, throughputs, other performance issues.

Can someone send me some info?

Best regards,

Mihai

discussion Filed Under:

Security, Data Loss Prevention (Vontu), Agents, Features, Performance

Comments RSS Feed

Comments

Oct

2009

0 Votes 0

jjesse

Accredited

Certified

Currently there is no 64-bit

Currently there is no 64-bit agent for Endpoint as far as I know, trying to get the offical word but as far as i understand on the endpoint side it is 32-bit only. Will double check that

Also there is not a supported agent for mobile devices, yet I have heard that it is on the roadmap.

For data rest it does not matter whether or not the server is 64-bit or 32-bit as you doing the scanning against the file share/database/etc...

A lot of the performance issues/throughputs/latency all depend on how you set things up and also what product within DLP you are talking about as well (Data in Motion vs Data at Rest).

Each DAR scan can be throttled and scheduled around backup windows, work hours, etc.

Drop me a note if you have further questions or would like to talk in person

Jonathan Jesse Practice Principal ITS Partners

Nov

2009

0 Votes 0

Jim - DLP Support Team

Symantec Employee

Accredited

x64 info, mobile device, and performance

-We can scan againist 64bit shares and databases, however Enforce, EDPA and Detection servers must remain on 32-bit OS.
Article ID: 50079 Network monitor does not show traffic on RHEL x64

Article ID: 42256

Can Vontu run on a 64 bit OS?

Applies To
	• Vontu Installation/Upgrade

Problem Summary
	If you have a 64-bit OS installed, will Vontu run on it?

Solution
	Vontu does not currently support 64-bit OS. You can run on 64-bit hardware, but the OS must be installed as 32-bit.

-Mobile device support is currently not available
-Discover Performance/throughput: See - Symantec DLP Network Sizing Guide KB 46671 https://kb-vontu.altiris.com/article.asp?article=46671&p=4

Public Article ID: 49240

Discover Performance Troubleshooting

Applies To
	• Vontu Discover Server

Problem Summary
	My Discover Scan is slower than I would expect. How can I determine where the bottleneck is?

Solution

In general, the performance bottleneck for Discover scans is the transfer to the Discover machine. Linux Discover processes are 1/3 slower than Windows.

Setup your target
Check your policy groups. Are there any empty policy groups? This will affect Discover performance.
Run the scan for 10 minutes, keeping an eye on CPU usage on the Discover machine. Then pause the scan. Calculate the scan rate in GB/Day using the information on the Scan Detail page.
- If it is at least 250 GB/Day then all is good. Resume the scan.
- If it is much less than 250 GB/Day go to step 4.
Was the CPU usage on the Discover machine close to 100% during the 10 minutes of scanning?
- If so, you are probably limited by cracking. Check to see if the target has a lot of XLS and/or PDF files. If this is the case, there is not much that can be done except add more hardware.
- If CPU was not maxed out, go to step 5.
Manually copy 2GB worth of representative files from the target to the Discover machine and calculate the transfer rate. (It is important to copy the actual files that you will be scanning as the average file size has a big impact on transfer rates.)
- If this rate is slower than 300 GB/Day, then you are probably limited by network issues. Check NIC settings and make sure they are compatible with the relevant switch settings. Check number of hops and move Discover closer to target if possible.
- If the rate is greater than 300 GB/Day go to step 6
Turn off collection of ACL and Owner information. In Crawler.properties, set filesystemcrawler.collectaclandowner = false. Restart the Discover monitor. Run the 10 minute test again.
- If this solves the problem, then you need to weigh the value of scan rate vs security meta-data. Collecting the extra meta-data takes time and there probably isn't anything that can be done to speed it up.

____________
Jim Martin | Sr. Technical Support Engineer |
Data Loss Prevention, Symantec
http://go.symantec.com/vontu

Looking for something else?
Chances are you can find it in our Knowledgebase
https://kb-vontu.altiris.com

Symantec Corporati

Dec

2009

0 Votes 0

symcisacpuhog

vontu endpoint support for windows 7 64 bit

thank you for the answer jim but im a bit confused. Are you talking about the network product or the vontu dlp endpoint agent? i am just looking for a simple answer of "does dlp endpoint support windows 7 32 bit and 64bit?" If not when is the expected date. I checked the big windows 7 support page you guys have but it says it will support win7 in december but doesnt specify 32 or 64bit. TIA

May

2010

0 Votes 0

Naor Penso

Accredited

Hi,

Currently there is no agent for 64bit OS.
The DLP Agent does support Windows 7 But only 32Bit.

Kind Regards,
Naor Penso

For Forum threads, please click "Mark as Solution" if answered.
For all content, please give a thumbs up if you agree with or support the post.
Thanks :)

Sep

2010

0 Votes 0

RonakP

Symantec DLP 10.0 Has agents

Symantec DLP 10.0 Has agents for 32bit Windows 7 and 64bit Windows 7. They were released in April or May of 2010

There are 2 different installers for it.

Oct

2010

0 Votes 0

George-Aflac

Symantec DLP 10.5 Product ID

Does anyone know what the product ID is for Symantec DLP endpoint agent 10.5.1000.01022. I have to manualy clean the clients from the registry and need the product ID.

George

Mar

2011

0 Votes 0

UFO

Is there any document

Is there any document describing DLP 11 hardware support? Looking for it for a long time.

STS: NetBackup and Storage Foundation for Windows
If this post was helpful please vote +1
If this post was useless or just for points please vote -1

Symantec DLP facts

Comments

Currently there is no 64-bit

x64 info, mobile device, and performance

vontu endpoint support for windows 7 64 bit

Hi,

Symantec DLP 10.0 Has agents

Symantec DLP 10.5 Product ID

Is there any document

Would you like to reply?

Links

Technical Support

Symantec.com

Store

Community Stats