Data Loss Prevention Enterprise Suite, Subscription License with Support - 1 year

Symantec DLP Enterprise Suite – A comprehensive platform that protects against information loss at every stage of its processing

Symantec Data Loss Prevention Enterprise Suite (DLP-ES-SUB) is an integrated, enterprise-class solution for protecting confidential information, covering all DLP system components within a single, coherent architecture. This package combines seven advanced modules whose task is to secure data in each of its life cycles - from the moment of its creation, through transmission and use, to storage in distributed IT environments.

Advanced security for your organization's most sensitive data.

The central element of the package is DLP Core - a common platform managing policy rules, incident analysis, data classification and communication with agents and sensors. It is within it that all modules - both network, endpoint and data resource scanning - share detection rules, definitions of sensitive content and risk profiles. This architecture ensures consistency of operation and clear interpretation of policies, regardless of where the incident was detected.

Endpoint Discover and Endpoint Prevent solutions play a key role in monitoring and protecting data directly on end devices - laptops, desktop computers and virtual machines. The Endpoint Discover module is responsible for scanning local drives for sensitive content, such as personal data, financial information, health data and strategic documents. It offers advanced content classification mechanisms, recognizes the document structure and allows for remedial actions such as encryption, quarantine or assigning access rights. Endpoint Prevent extends this protection to data in use - analyzing user actions in real time, such as attempts to copy data to external USB media, upload to cloud applications, publish to a browser or attach to emails. The system allows for context-sensitive reactions - blocking actions, displaying notifications, forcing justifications or full reporting of actions.

The network components of the package - Network Monitor, Network Prevent for Email and Network Prevent for Web - are responsible for controlling data in motion moving through the organization's network. Network Monitor analyzes all outgoing network traffic in real time, covering not only standard protocols (HTTP, HTTPS, FTP, SMTP), but also custom and proprietary application protocols, so it is able to detect attempts to transmit confidential data through unauthorized channels. Unlike other tools, it works without packet loss, ensuring detection accuracy even in heavy network conditions.

Network Prevent for Email extends these possibilities by interfering with the flow of e-mail messages leaving the organization - both from local servers (MTA) and from cloud e-mail platforms such as Microsoft 365. It allows not only to monitor the content and attachments of messages, but also to block their sending, redirect them to a secure channel, or automatically encrypt them using the recipient's identity. Additionally, it allows the use of flexible rules based on message metadata - e.g. sender's name, title, or recipient group. Network Prevent for Web works similarly - it integrates with proxy gateways (based on ICAP), which allows you to monitor and modify data sent to the Internet - via a browser, web applications, FTP or REST API. It can not only block the transmission of sensitive content, but also dynamically modify or remove fragments of HTML documents before they are published online.

Network Discover and Network Protect modules are responsible for analyzing and securing data stored in storage systems - both local and distributed. Network Discover scans file servers (Windows, Linux, Unix), document repositories (SharePoint, Documentum, Lotus Notes), mailboxes (Exchange) and databases (Oracle, MS SQL, DB2), identifying sensitive data and mapping their distribution in the organization. Thanks to scanning optimization (delta scan), the system can operate effectively in large environments, reducing time and infrastructure load. Network Protect complements Discover by enabling immediate corrective actions - e.g. automatically moving a file to a quarantine zone, granting limited access rights, encrypting the content or marking a file with information about policy violations. The built-in FlexResponse interface also enables integration with external data protection systems, such as Symantec File Share Encryption, Azure RMS or Adobe LiveCycle, and allows you to create your own custom response methods.

All components of the package are combined into one management platform, thanks to which security administrators have access to a central repository of incidents, reporting and a threat classification system. The solution supports content signature mechanisms, contextual analysis (e.g. file origin, user, application), identification of data structures (e.g. PESEL numbers, credit card data), predefined classification (e.g. GDPR, HIPAA, PCI), as well as your own definitions and data patterns.

DLP Enterprise Suite can be deployed both on-premise and in a hybrid model, integrating with cloud services Microsoft 365, Google Workspace, and with proxy and firewall solutions from various vendors. Thanks to the agent's flexible architecture and support for Windows, macOS and Linux, protection can be effectively implemented even in heterogeneous environments.