Data Loss Prevention

 View Only
  • 1.  Symantec DLP not preventing uploads via HTTPS Protocol

    Posted Apr 14, 2016 01:28 AM

    I am currently working on a DLP solution (Endpoint Prevent)  for my company. However, Is there any workaround for this issue? My concern is users using gmail to upload confidential documents via HTTPS and Symantec DLP is unable to capture that event.



  • 2.  RE: Symantec DLP not preventing uploads via HTTPS Protocol

    Posted Apr 15, 2016 04:56 AM

    Hello,

     

    Which DLP version are you using? If you upgrade to the 14.0.1 v (agents and endpoint servers) the DLP will be able to control the Gmail traffic (using the latest versions of IE, Chrome and Firefox).

    Just make sure you activated the below options in agent monitoring:

    Capture.PNG

    If you are using for instance the DLP 12.5v, you can still control Gmail traffic with IE but not with Chrome unless you add manually the Chrome app to the Application monitoring (is not recommended and brings performance issues, in the latest DLP version the Chrome is already natively supported).

    Best regards,

    Morgado



  • 3.  RE: Symantec DLP not preventing uploads via HTTPS Protocol

    Posted Apr 15, 2016 05:25 AM

    Hello

    I am using Symantec DLP v 14.0.1 . I already have active options above.  But I want to block Https Upload in all browsers. such as opera, crazy browser, safari.
    Can I add this Browsers to Application Monitor For Monitoring HTTPS Protocol? 

    Or is there a way to Block other Browser?



  • 4.  RE: Symantec DLP not preventing uploads via HTTPS Protocol
    Best Answer

    Posted Apr 15, 2016 07:29 AM

    That's right Yaser. You can add these browsers in the Application Monitoring.

    Do not forget to activate them in the Application File Access (AFA), under Agent Monitoring.

    Later you can add response rules to block the AFA actions such as webupload to Safari.



  • 5.  RE: Symantec DLP not preventing uploads via HTTPS Protocol

    Posted Apr 23, 2016 04:57 PM

    Please check below

    1. Which browser  and whether its supported by current DLP which you have in your environment
    2. Which browser version that DLP supports
    3. Have you configured the any application monitoring for browser and its enabled
    4. Any third party tool/proxy tool is installed on machine