Our approach involves issuing warnings when users send over twenty sensitive messages, such as bank account numbers, across various channels like email and chat.
Systems Admin at a insurance company with 10,001+ employees
Robust support and visibility, but some users may encounter challenges, particularly with complex setups and certain application integrations
Pros and Cons
- "The most valuable features are identifying sensitive data and issuing alerts."
- "There is a need for improvements, particularly in ensuring that file-based recognition is more reliable and comprehensive."
What is our primary use case?
How has it helped my organization?
Having visibility into the quantity and reasons behind the data we send out is crucial. This is particularly significant when dealing with sensitive information like Social Security Numbers, especially in the context of desktop backups. This newfound visibility not only contributes to time and potentially cost savings but also enhances credibility. Leveraging blocking in our policies serves as an effective remediation measure. When a policy is in place, it acts as a gatekeeper, preventing users from carrying out actions that go against the specified policy, even if they intend to do so. This proactive approach ensures a robust defense mechanism.
What is most valuable?
The most valuable features are identifying sensitive data and issuing alerts. This was further enhanced by email notifications sent to our secondary mailbox, providing comprehensive oversight of website activities. These features have proven to be beneficial in our role within the financial sector, where safeguarding customer data and ensuring overall data security are top priorities. Ensuring secure connectivity to iOS is vital, with enabled features on endpoints being essential for data security. The importance of data protection expands to the cloud and various platforms, especially in the context of deploying applications across multiple environments.
What needs improvement?
There are still inconsistencies in the functionality of mail tips and related features. Occasionally, the system fails to recognize words and content accurately in applications like Word and Excel, with effectiveness contingent on simplification. There is a need for improvements, particularly in ensuring that file-based recognition is more reliable and comprehensive.
Buyer's Guide
Microsoft Purview Data Loss Prevention
December 2024
Learn what your peers think about Microsoft Purview Data Loss Prevention. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,053 professionals have used our research since 2012.
For how long have I used the solution?
I have been using it for two years.
What do I think about the stability of the solution?
I would rate its stability capabilities six out of ten.
What do I think about the scalability of the solution?
I would rate the scalability abilities seven out of ten.
How are customer service and support?
The support is commendable, but there are notable issues with the product, particularly concerning exchange clients, which adds a layer of complexity. I would rate it seven out of ten.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I previously worked with Symantec.
How was the initial setup?
The initial setup proved to be somewhat complicated due to the challenges and issues we encountered.
What about the implementation team?
During our initial implementation of DLP, we encountered several challenges, particularly with issues like malfunctioning mail tapes and difficulties in downloading policies correctly. Despite ongoing efforts by the team to address these issues, there were limitations in policy functionality, with successful implementation observed primarily on the web client rather than the client side.
It took nearly six months to conclude and finalize various aspects.
What was our ROI?
The ROI is inherent in the existing license, making it unnecessary to incur additional expenses for another tool.
What other advice do I have?
Overall, I would rate it seven out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Policy customization enhances data security across multiple platforms
Pros and Cons
- "The policy customization feature is very useful, and we have successfully used the auto policy configuration."
- "More training for end users on how it works would be beneficial."
What is our primary use case?
Our primary use case for Microsoft Purview Data Loss Prevention is mainly for the categorization and classification of data into different classifications, ensuring privacy.
What is most valuable?
One of the most effective features is the excellent reporting tool that shows any potential breaches.
Additionally, it can be used across multiple platforms, such as Office 365 and file servers, which is a significant advantage.
Furthermore, the policy customization feature is very useful, and we have successfully used the auto policy configuration.
What needs improvement?
There isn't anything specific off the top of my head for improvements. However, more training for end users on how it works would be beneficial.
For how long have I used the solution?
I have been using Microsoft Purview Data Loss Prevention for six months.
What do I think about the stability of the solution?
We have had a couple of stability issues, such as an inability to change the classification of some documents due to an issue with Microsoft Purview on Office 365, but nothing significant.
What do I think about the scalability of the solution?
Microsoft Purview Data Loss Prevention is very scalable for our environment, and I would rate it ten out of ten for scalability.
How was the initial setup?
The initial setup was very easy. On a scale of one to ten, I would rate the ease of setup as eight out of ten.
What's my experience with pricing, setup cost, and licensing?
It is quite expensive for us as the shift to E5 licenses represents a significant increase in cost. The cost works out to about $15 per user per month.
What other advice do I have?
I recommend ensuring thorough testing and communication before rolling out Microsoft Purview Data Loss Prevention. I would rate the overall solution eight out of ten.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Last updated: Nov 28, 2024
Flag as inappropriateBuyer's Guide
Microsoft Purview Data Loss Prevention
December 2024
Learn what your peers think about Microsoft Purview Data Loss Prevention. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,053 professionals have used our research since 2012.
IT Manager at a manufacturing company with 51-200 employees
Real-time compliance enables us to showcase in-depth information to auditors
Pros and Cons
- "For Purview's natively integrated compliance across Azure, Dynamics 365, and Office 365, I would give it a 10 out of 10. It provides all the insights and information."
- "The scalability, in terms of the portal, could be more user-friendly. Sometimes I have faced difficulties in identifying the options."
How has it helped my organization?
We can show our compliance in real time. The in-depth information helps to showcase to the auditor and the consultants the state, current threats, and risk alerts as well.
In addition, because of the automated alerting, it helps reduce the threat of insider attacks.
Other benefits include that Purview has helped us save time and helps us meet compliance requirements.
What is most valuable?
It's really important and very nice that Purview delivers data protection across multi-clouds and multi-platform environments. It's also definitely important for compatibility across the infrastructure that Purview can connect to iOS, Mac, and Android.
Out of 10, I would give Purview an eight for the data connector platform for supporting ingestion. And for Purview's natively integrated compliance across Azure, Dynamics 365, and Office 365, I would give it a 10 out of 10. It provides all the insights and information.
Purview's data loss protection for remediating policy violations gives quite in-depth information. Reviewing and assessing the information is definitely critical, so it's really helpful.
We also use Purview data loss prevention for macOS endpoints, and the fact that they have extended it to macOS is very important because most of our C-level and board members are using macOS. It's vital because they are sharing and accessing critical information.
Overall, it gives us quite good visibility of the estate and the data, so it's a very helpful product.
For how long have I used the solution?
I have been using Microsoft Purview Data Loss Prevention for a year.
What do I think about the stability of the solution?
The stability of the solution is 10 out of 10.
What do I think about the scalability of the solution?
Its scalability is a nine out of 10. The scalability, in terms of the portal, could be more user-friendly. Sometimes I have faced difficulties in identifying the options. It's not that big of a deal, and their documentation is really good. But some experience is required.
Still, it is suitable for both bigger and smaller companies.
How are customer service and support?
I have not required any technical support yet.
How was the initial setup?
The deployment was straightforward. It took seven days, approximately.
Our strategy was to identify the critical areas and information and, based on that identification, perform a gap assessment and implement the policies and processes.
We had two security analysts involved. There has been no maintenance required yet.
What was our ROI?
Because we just started using this, there is no ROI this year. Maybe we will see it in the next year.
What's my experience with pricing, setup cost, and licensing?
The pricing is reasonable. We have a yearly subscription.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Lead Cloud Solution Architect at a energy/utilities company with 51-200 employees
Fits into heterogeneous environments and has automatic labeling capabilities
Pros and Cons
- "It has helped our clients to reduce the time to action on insider threats because it can be integrated."
- "I would like Microsoft Purview Data Loss Prevention to be on the source code or SQL databases. It is difficult to do classification and labeling when you have a third-party source code or a third-party Oracle database. It is seamless when it comes to Microsoft documents but is not so with third-party source codes. Microsoft needs to work on it a little bit more."
What is our primary use case?
We use Microsoft Purview Data Loss Prevention for the entire life cycle and not just DLP. That is, we use it for discovery, classification, and DLP.
How has it helped my organization?
Earlier, our customers had no control at all over compliance, and confidential documents that were going out were not at all looked into. Microsoft Purview Data Loss Prevention has been a huge benefit to our clients in this regard.
What is most valuable?
I like the whole value proposition of Microsoft Purview, particularly the DLP and integration with external solutions.
Purview's natively integrated compliance across Azure, Dynamics 365, and Office 365 is important to us because it's all about compliance.
Organizations have various compliance policies including the regulatory policies that are defined within the organization and those for a particular region. Therefore, it is important to our organization that Purview is built taking into account critical regulations from around the world.
This solution enables our clients to show compliance in real time and has helped them in their meetings with compliance regulators.
Purview Data Loss Prevention provides presentations to educate users on how best to handle sensitive data. When the user doesn't know whether a document should be classified under a certain label, Purview will provide suggestions or will auto-classify the particular document. It has automatic labeling capabilities.
It's important that Purview provides data protection for iOS, Android, and data in other SaaS apps because our customers have heterogeneous environments. Purview perfectly fits into the heterogeneous space.
Purview has reduced the number of solutions needed to interact with each other and has coexisted with them. Some customers have completely replaced their solutions with Purview, and others have Purview for classification labeling and a third-party solution for the DLP verdict.
It has helped our clients to reduce the time to action on insider threats because it can be integrated.
What needs improvement?
I would like Microsoft Purview Data Loss Prevention to be on the source code or SQL databases. It is difficult to do classification and labeling when you have a third-party source code or a third-party Oracle database. It is seamless when it comes to Microsoft documents but is not so with third-party source codes. Microsoft needs to work on it a little bit more.
Everybody wants information protection, but not all of them can afford the M365 license. I would like Purview to be a standalone product or solution.
For how long have I used the solution?
We've been working with this solution for the past three years.
What do I think about the stability of the solution?
It is definitely stable.
What do I think about the scalability of the solution?
Our clients are medium to large organizations, and Microsoft Purview Data Loss Prevention has to be a scalable solution for them.
How are customer service and support?
Overall, Microsoft's technical support is good, and I would give them a rating of six out of ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial deployment is straightforward. We can quickly configure the policies, but the classification and labeling take time.
The solution does require monitoring.
What's my experience with pricing, setup cost, and licensing?
Microsoft Purview Data Loss Prevention is part of a bundle and is not sold as a standalone product.
What other advice do I have?
I recommend Microsoft Purview Data Loss Prevention and rate it at nine on a scale from one to ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner/Reseller
Sr. Lead Consultant at catapult
Definitely the best in class with great stability, competitive price, support for different repositories, and very useful auto-labeling feature
Pros and Cons
- "The auto-labeling feature is definitely the most valuable feature. It goes in and labels the documents for you in different repositories. It covers the Outlook and Exchange repositories along with SharePoint and OneDrive. It is really helpful in those areas."
- "There is a lot of ambiguity when you are setting up labels, such as sensitive information labels. It is a little daunting at first if you don't have prior knowledge, and there is a little bit of a learning curve for setting up the labels. Some of the setup wizards could be more helpful from an AI perspective. They can streamline the setup through more AI technologies so that you don't have to jump through so many hoops and different menus and dropdowns. It would be useful to have a setup wizard that is more hands-off and engaging for setting up the information type labels. If you tell them this is what we're trying to protect, it should basically start to lead you down that path of best practices. Such a feature would be great."
What is our primary use case?
We basically use it to track personal identifiable information. We are also using it to label any confidential, company trade secret, and internal data. We have an internal use policy and a confidential use policy to encrypt the documents.
What is most valuable?
The auto-labeling feature is definitely the most valuable feature. It goes in and labels the documents for you in different repositories. It covers the Outlook and Exchange repositories along with SharePoint and OneDrive. It is really helpful in those areas.
What needs improvement?
There is a lot of ambiguity when you are setting up labels, such as sensitive information labels. It is a little daunting at first if you don't have prior knowledge, and there is a little bit of a learning curve for setting up the labels.
Some of the setup wizards could be more helpful from an AI perspective. They can streamline the setup through more AI technologies so that you don't have to jump through so many hoops and different menus and dropdowns. It would be useful to have a setup wizard that is more hands-off and engaging for setting up the information type labels. If you tell them this is what we're trying to protect, it should basically start to lead you down that path of best practices. Such a feature would be great.
What do I think about the stability of the solution?
It is absolutely stable. A part of the success criteria was to not have any stability issues. It seems very responsive after you get through the deployment aspect of it.
What do I think about the scalability of the solution?
We have been adding more label information types, and it seems to scale well. I don't see any issues there. This part of the solution is built into the Microsoft Cloud ecosystem. Therefore, you don't really have any sort of quota or cap on your data. It seems to be going really well on that front.
Currently, we have about 600 users. We're going to continue on this Microsoft journey. There is another feature that we're looking at called the Purview feature, which is basically adding the same sensitive info type tagging for data in your Microsoft SQL databases. We are currently looking at using that.
How are customer service and technical support?
Their technical support is excellent. We've had some hiccups here and there regarding the setup. We contacted Microsoft, and they were very quick to respond with solutions. The online Microsoft documentation is also kept fairly up to date, which has been another plus. Its documentation is really well done.
How was the initial setup?
It was fairly complex because it has a very wide and broad gamut of sensitive info types. Each of the labels and sensitive input types that we created took four to six hours of initial setup and work. The deployment itself is pretty instantaneous, but getting the data back and actually seeing the labels and sensitive info types come back in the form of data tagging definitely takes some time. Depending on the size of your repository, it can take longer to scan the data and label it while going through all the algorithms. It probably took a good two to three days to actually see some meaningful data.
What's my experience with pricing, setup cost, and licensing?
It is a part of our Microsoft licensing. We pay for a yearly renewal. Its price is reasonable for the size of the organization we are. It is fairly competitive, and you get what you pay for. We have an E5 license, and a part of understanding the E5 license is to see what all you get with it. If you really look at it from that standpoint, you get a lot of value. You have Defender and all its security features in there as well.
Their licensing is fairly flexible. They have different programs. We've seen ones where you could pay for up to three to five years in advance. There is also a monthly pay-as-you-go type of deal, but we're doing a yearly renewal and fixing the budget.
Which other solutions did I evaluate?
We didn't evaluate any other product because it was just way too convenient. It is a part of our Microsoft licensing, so we were already paying for it. There wasn't anything appealing to try a third-party solution or anything like that.
What other advice do I have?
I would advise others to definitely go to the documentation first and plan ahead. It is definitely something you plan, and it definitely requires a kind of a crawl-walk-run approach, so you definitely want to plan for it. I would also suggest taking advantage of the testing and reporting features that are available to be able to do a pilot and test it before you actually deploy it.
I would rate Microsoft Endpoint DLP a nine out of ten. There is a little area for improvement, but it is definitely the best in class.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Senior identity and Access Management Engineer at a manufacturing company with 1,001-5,000 employees
Comes with a reliable installation and security score which enhances security
Pros and Cons
- "Microsoft Purview Data Loss Prevention's responses are faster. Its installation is also reliable. The security score helps with the security part."
- "Microsoft Purview Data Loss Prevention's licensing is expensive."
What is our primary use case?
We use the product to set up policies.
What is most valuable?
Microsoft Purview Data Loss Prevention's responses are faster. Its installation is also reliable. The security score helps with the security part.
What needs improvement?
Microsoft Purview Data Loss Prevention's licensing is expensive.
What do I think about the stability of the solution?
Microsoft Purview Data Loss Prevention is stable.
What do I think about the scalability of the solution?
The tool's scalability is great.
How are customer service and support?
We have dealt with Unified and Premier support. Whenever I raise a ticket, I start researching the answer as well.
How was the initial setup?
The tool's implementation is easy.
What was our ROI?
We have seen ROI with the product's use.
What other advice do I have?
I have Microsoft Purview Data Loss Prevention on Mac, but I do not use it daily.
We use GCP, and it is good that the product can expand to it.
It is good that the product goes automatically into the sensitivity limits of a country.
Microsoft Purview Data Loss Prevention saves time in the implementation area.
I rate the product an eight out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
DevOps Engineer at CyberGate Defense LLC
Enhance data protection with easy monitoring but may have audit limitations
Pros and Cons
- "It's secure and can be integrated with an existing Forcepoint DLP setup."
- "Some main features are limited in comparison to other solutions."
What is our primary use case?
A client was interested in Microsoft Purview Data Loss Prevention and Forcepoint LP solutions. They wanted to understand the difference between Microsoft Purview Data Loss Prevention and Forcepoint features.
What is most valuable?
Microsoft Purview Data Loss Prevention is known for its user-friendly interface, making it easy to configure the DLP system. It allows monitoring of data movement, ensuring sensitive data is protected. It ensures data is retained within the organization.
Also, it's secure and can be integrated with an existing Forcepoint DLP setup.
What needs improvement?
Some main features are limited in comparison to other solutions. There is an issue where data transfer from a local to shared drive works, but shadow to local does not. Also, setting a whitelist for two pilot users often affects all users. There is no audit option in standard DLP, which is crucial for monitoring. Integration documentation is incomplete.
For how long have I used the solution?
Microsoft Purview DLP implementation was almost a year ago.
What do I think about the stability of the solution?
Real-time working has issues, and the system sometimes doesn't operate as expected.
What do I think about the scalability of the solution?
Microsoft Purview DLP shows strong scalability and availability.
How are customer service and support?
The level of knowledge from customer service was limited, as seen when a representative seemed confused about integration processes.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
The client was already using Forcepoint DLP and wanted to compare it with Microsoft Purview Data Loss Prevention features.
What's my experience with pricing, setup cost, and licensing?
With the E5 license, various features of Microsoft Purview Data Loss Prevention are available. It offers an economical solution compared to others.
Which other solutions did I evaluate?
The client was evaluating Microsoft Purview Data Loss Prevention against Forcepoint DLP to decide whether to switch or use both.
What other advice do I have?
Based on my experience, I rate the Microsoft Purview Data Loss Prevention solution seven out of ten. Microsoft DLP is effective yet has room for improvement in some areas. Reviewing other available options and comparing the benefits can be helpful.
Disclosure: My company has a business relationship with this vendor other than being a customer: partner
Last updated: Nov 22, 2024
Flag as inappropriatePresident at RidixLab
An easily scalable and easy-to-configure solution that protects personal data
Pros and Cons
- "The product is easy to configure."
- "The solution should provide better integration with other systems."
What is our primary use case?
I use the solution to protect files with personal information.
What is most valuable?
The product is easy to configure. It protects personal data. The product can connect to servers on-premise.
What needs improvement?
The solution should provide better integration with other systems.
For how long have I used the solution?
I have been using the solution for a long time.
What do I think about the stability of the solution?
The product is very stable. I never had any issues with the product. I rate the stability a nine out of ten.
What do I think about the scalability of the solution?
The solution can be quickly scaled with ease. More than 5000 people are using the solution in our organization.
How are customer service and support?
I contacted support regarding metadata. The support took one to two weeks to resolve my query.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
We used Security and Compliance Center, but it did not produce accurate results like Microsoft Purview.
How was the initial setup?
The initial setup is very easy. We just had to go through Microsoft’s documents and understand the best practices.
What about the implementation team?
I did the deployment myself without anyone’s help. We have the solution deployed on around 4500 endpoints.
What's my experience with pricing, setup cost, and licensing?
The product has the best price-to-performance ratio. Its pricing is better than other products.
What other advice do I have?
Only people with permission can access the document when we share a document in Microsoft Teams. We need to have good business processes to use the product. It is important to me that Purview can connect to iOS, Mac, and Android devices. If Carbon Black is installed in our system, we must put it on passive mode while using Microsoft Purview.
The product is very well integrated. We do not have to pay more to make the best use of the solution. Everything is part of the E5 license. Storage costs less compared to other products.
It's very important for me that Purview was built taking into account critical regulations from all around the world. Since we share a lot of information with people from other countries, respecting their compliance and regulatory systems is crucial.
Educating users is very important. Irrespective of whether it is an employee, partner, or consultant, people should be aware of how to protect themselves and the company while they work. Change management is very important.
I use DLP on my iPad. I have an iPhone, and I like to have access to different systems. It's very important to me to have the flexibility to choose my endpoint. Purview has helped reduce the number of solutions I need to interact with because it integrates everything and has become an integral part of my workday.
Many employees would use office computers for tax filing and other personal needs. I was working for the regulatory and governance department. When I configured Purview and scanned all the data, I could see all the information of the employees.
I automate everything with metadata. If we choose the metadata option for financial documents, Purview will associate these documents with a level of confidentiality. The AI’s automation speed and accuracy of risk detection are good, but to use the features well, we should know our processes very well.
The solution's AI is very sharp. We need to protect data and confidential documents. The product makes me feel secure. It ensures that the people outside our organization don't have the right to access our data. We can also automate email alerts. Microsoft releases regular updates to protect personal data. The solution’s regulations help organize our company.
Overall, I rate the solution a nine out of ten.
Disclosure: PeerSpot contacted the reviewer to collect the review and to validate authenticity. The reviewer was referred by the vendor, but the review is not subject to editing or approval by the vendor.
Buyer's Guide
Download our free Microsoft Purview Data Loss Prevention Report and get advice and tips from experienced pros
sharing their opinions.
Updated: December 2024
Popular Comparisons
Zscaler Zero Trust Exchange Platform
Varonis Platform
Forcepoint Data Loss Prevention
Symantec Data Loss Prevention
Digital Guardian
GitGuardian Platform
Netwrix Endpoint Protector
Palo Alto Networks Enterprise Data Loss Prevention
McAfee Total Protection for Data Loss Prevention
GTB Technologies Inspector
Buyer's Guide
Download our free Microsoft Purview Data Loss Prevention Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which solution do you prefer: Symantec DLP, Proofpoint DLP, or Microsoft Purview DLP?
- How to minimize false positives for PII and PCI around different data systems across the globe?
- Symantec Endpoint vs. McAfee Complete Endpoint Protection: Technical Comparison Between Data Loss Protection Solutions
- When should companies use SSL Inspection?
- What software solution would you recommend to monitor user machines?
- What is the difference between "data protection in transit" vs "data protection at rest"?
- Looking for recommendations and a pros/cons template for software to detect insider threats
- Endpoint DLP for Mac Network
- Best alternatives to Digital Guardian for data protection?
- What is Cognitive Cybersecurity and what is it used for?