Symantec Data Loss Prevention Reviews

I am primarily using Symantec Data Loss Prevention for MIP labels, sensitivity categorization, and securing data such as confidential PAN card and Aadhaar card numbers. I also use it for keywords matching tied to customer-specific project codes and email policy configuration as per project requirements.

Symantec Data Loss Prevention has proprietary metadata and is well-suited for endpoint-level security. It stands out for supporting multiple protocols like email and SMTP without needing user profile login for endpoint agents. Once policies are downloaded to the local system, they function independently of a user's login. The solution helps enhance security operations when integrated with ServiceNow and offers robust incident response capabilities.

Symantec Data Loss Prevention (DLP) is highly effective in safeguarding sensitive data in cloud storage. Its granular features allow us to tailor implementations according to specific use cases and customer requirements.

Symantec Data Loss Prevention primarily targets confidential data. We utilize the indexing feature along with Endpoint Discover (EDM) to analyze consultation files. This involves scanning their content using OCR and managing data access accordingly.

Symantec Data Loss Prevention is an enterprise-level solution and we utilize it for its customization, and flexibility across the platform as well as the excellent support and feature levels compared to other similar solutions.

There is still potential for improvement when it comes to data discovery over a network. How successful the process is depends largely on the network configuration and connectivity to the destination. Utilizing a detection server or network discovery can help facilitate the data discovery process. Recently, I discovered around 15,000 to 20,000 shareholders for Symantec using DLP for data discovery. Agent Discovery is also highly effective, with no performance issues showing up when performing endpoint discovery for the Symantec database.

I have not had much experience working with Macs, but they come with an in-built security feature. This can be challenging to work with, as not all features are supported in comparison to Windows. However, the solution recently became compatible with the Linux operating system, allowing us to deploy agents on this system as well.

Symantec Data Loss Prevention is a globally accepted product that provides an enterprise-level view of an organization. Although some of the features the solution offers are being utilized, there is still more potential to be explored if the organization puts more focus on using them to their fullest potential. Recently, the ICD or ID features, which cover all increase points and every other technology, were introduced. The solution provides features that correlate all events and generate top results. In DLP, the role bit and success management are present, allowing us to escalate incidents. We can also define an escalation process, allowing data owners to view incidents and escalate them as necessary. This functionality is provided by the solution. The primary goal of the DLP is to monitor and control the organization's data usage, as well as to facilitate audibility and accountability. Symantec Data Loss Prevention is well-suited to fulfill these needs.

The solution helps us find sensitive data and apply policies based on user risk. We can use indexing for highly confidential documents that are not to be published or shared with more than two to five people outside of the organization, such as the board of directors. Indexed Document Matching is a useful feature that can help ensure that the document remains secure. We can create remote detection over the product and map the UNC part. The data owner will put the file of a particular document, which will be converted into IDX format. We can then apply the policy remotely so that the data will not come to the DLP admin or any other person and will remain protected.

The solution offers a range of pre-defined data identifiers to meet all regulatory requirements, such as those mandated by the GDPR, PHI, PCI, and USUN. These data identifiers can be used to identify and protect personal data globally.

The solution helped reduce the time our DLP administrator spends on data loss protection. Spending time monitoring the data is essential. We have to stay up to date and investigate any issues that arise in order to improve health monitoring by fine-tuning incidents and reducing false positives because automation is not available. 

It's important for information security due to the fact that it's a powerful solution. It defines sensitive secret data on the customer's environment and monitors for any breaches.

There are two things this solution has helped improve. 

In terms of the DLP, it can protect from data breaches in your company since you need to define secret and sensitive data in your organization. And the DLP solution monitors all of this data. For example, if you have personal data, you can define this data to the DLP, and then, if someone tries to send this data outside of your organization, this solution would prevent that data breach or generate an alert. 

The second way the DLP solution can help is by implementing best practices. For example, every organization has a business flow. This business flow can sometimes be wrong according to regulations. For example, with GDPR, if you are working with European customers, European clients, or European residents, you need to follow GDPR regulations. Or, if you are working with the payment industry or storing credit card data, you need to follow PCI DSS rules. This DLP solution can help customer organizations ensure they follow best practices.

The use cases depend on the industry. The use cases for the telecommunication industry and manufacturing industry are different. Typically, the tool is used for data loss prevention.

The product is mature. It has a simplified GUI. We do not have to navigate and hop to different places or UIs to make things work. Everything is in one console. We have a unified platform to do everything. Symantec has one of the best incident management capabilities. It can also be integrated with ServiceNow. We do not have to just use incident management on the Symantec Data Loss Prevention console. We can use ServiceNow, too.

Symantec Data Loss Prevention is a one-stop solution for DLP. Reporting for incidents is a USP of the solution. We get all the details we need. If I detect something but my incident response is weak and does not give me accurate or required details, then it's useless. Any detection will not help me if I do not take prompt action.

It helps us meet requirements. There is no product that gives you 100 percent coverage, but it's quite an improvement. It gives us added value.

When it comes to operational costs, a lot of false positives have been eliminated. It's an ongoing activity.

It has good options for policy findings. You can do granular policy enhancements with multiple options. And the SMB blocking is a very good feature.

Other good features include 

• application control
• integration with other proxy servers
• data discovery.

And the dashboard is very user-friendly. The solution is very easy to use, if you know the baselines, concepts, and how to implement things, it's very easy.

In terms of detection, that's up to us to decide exactly what we want. Whatever we have found has been worth it.

Symantec Data Loss Prevention also supports Macs and Linux. It's up to you how you filter your traffic. A normal user's machine should not have Linux. Usually, that would be a server-level operating system, but there are different controls for different operating systems.

I like how I have the possibility to check different channels with the same policy set.

The machine learning solution is very good. Many of our partners are not using mostly the machine learning function yet, however, the index document matching, the IDM, and the actual data matching function are the most useful. Those are very, very good functions of the DLP.

The OCR functionality could be better. We have OCR functionality. However, it is not as effective. It could be more effective. They need to work on the function that can catch PDF 5 and PDF 5 based on pictures, images, JPEGs, and so on, with text-to-all content. The main goal of this is to check those pictures against corporate policies.

I'd like it if, in DLP, the agent could have more detection capabilities.

Currently, many features can work only with Endpoint Prevention, Network Prevention, and Email Prevention. Those capabilities do not work on the Endpoint Prevent and Endpoint Detection. 

They need to expand the channels they check. It could be wider. So it should be able to check, for example, WhatsApp and mobile solutions, mobile communications, Facebook, et cetera. We're worried about data leakage on these channels. 

We used Symantec Data Loss Prevention for security purposes, mainly to handle confidential data and protect it from external interventions.

Symantec Data Loss Prevention helped us secure highly credible data of our customers, protect it from being copied, and safeguard it from external threats.