Data Loss Prevention

I have on my IT infrastructure implemented two Symantec products - Symentac DLP Standard on endpoints and Messaging Gateway. SMG can be integrated with DLP but not with DLP Standard. As I Know. Is there any product or possibility to integrate these two products? I appreciate if someone could recommend me the best weay how to solve this issue. Thanks.

You are looking at 2 separate use cases from a DLP point of view.  Messaging Gateway integration happens between Network Prevent for Email and SMG while DLP standard provides the Endpoint agent (data on the Endpoint).

What are you trying to accomplish?  DLP on the Endpoint proivdes Outlook and Lotus Notes integration for dealing w/ email that way.

If you had Network Prevent for Email (Data in Motion) things can be integrated

so, what's your requirements and business goal？ if you really need the integration, the only way is to update your dlp license.

Hi PKacer,

Please refer below

http://www.symantec.com/docs/TECH187056

http://www.symantec.com/docs/HOWTO77733

http://www.symantec.com/docs/HOWTO77732

https://www-secure.symantec.com/connect/forums/messaging-gateway-95-dlp-integration

https://www-secure.symantec.com/connect/forums/can-we-configure-symantec-messaging-gateway-symantec-dlp-network-prevent-smtp

In this case there are two kinds of users/devices - PCs and thin clients. Both of them should have some level of restriction how to handle corporate data. In the first stage when the thin clients were not established in the corporate infrastructure they used Symantec DLP Standard on PCs. Later they have moved some users from the PCs to thin clients (Citrix). They should be controled by DLP integrated to SMG (later to Symantec Web Gateway as well) and the concern is to integrate these two products into one management (i.e. to use the policies on for both type of users). The integration of SMG and DLP is clear. Somewhere I found that there is the crossgrade from DLP standard to DLP Endpoint Prevent. Ist this true? Or is there any possibility to integrate current DLP Standard client into DLP Enforce Server (with considering that the DLP standard client has less features than DLP Endpoint Prevent)?

Hi Pkcer ,

please refer below this will help you

https://www-secure.symantec.com/connect/forums/dlpencryption-poc

Pkacer,

If you want to protect your thin clients the same way you protect your full boxes you can install the DLP agent on your Citrix servers and it will monitor all the user sessions there.

You'll want to test this out carefully as the DLP agent will be monitoring many times more activity than a PC with a single user and thus will require some more resources than a 'regular' agent. Combine that with the fact that Citrix servers tend to be very fully loaded to begin with and you can run into resource issues.

But adding that agent to your Citrix server will get you the same protection for those clients as you have on your PC's.

Regarding upgrading your license, when you purchase a different license you apply the .slf file to Enforce and it will unlock whatever new features you purchased.

Hope that helps,

Tim