Data Loss Prevention

We are planning to implement DLP on VDI infrastructure. Can you direct me to any documents? or let me know the best practices on how to deply?

I read that agent should be installed on Citrix server and am not clear completely how oes it works.

the agent should be installed on the server. check the thread

https://www.symantec.com/connect/forums/how-install-symantec-dlp-140-citrix-xen-vdi-machines

the scalability document can be found under this link

https://support.symantec.com/en_US/article.DOC8801.html

Thanks!! but its not related to VDI desktop we use in our environment. It's related to Citrix apps installed on servers.

Can you let me know about persistent and non-persistent VDI's deployment?

For Citrix XenDesktop the agent is installed on the Virtual Desktop either via placing it on the master/golden image or deployment via SCCM. The agent acts almost identical to as if it was installed on a laptop or workstation - which the obvious channels not applying (such as Removable Storage). The drive redirection that Citrix does will be classed as a 'Network Share' in later verstions that aren't using Generic USB Mapping.

For Citrix XenApp, the agent is installed on the server. Be aware that the maximum supported concurrent sessions for XenApp is 40 concurrent session per server (40:1) - which is typically far below what most organisations will have running without planning for DLP.

The scalability document in the previous response is accurate for Citrix XenApp - https://support.symantec.com/en_US/article.DOC8801.html

Great..Thanks. Are there any best practices or document to include it in the image? or it's just straight process to install the agent in master image.

Great..Thanks!! Can we install agent in master image directly or do we have any best practices to include the agent in image?