what’s new data loss prevention 14. information is everywhere brings productivity, agility,...
DESCRIPTION
..and the Cloud is a Risky Place for Work Data Copyright © 2015 Symantec Corporation 3TRANSCRIPT
What’s New Data Loss Prevention 14
Copyright © 2015 Symantec Corporation2
Information is EverywhereBrings Productivity, Agility, Convenience ……and Problems
Cloud Mobile BYOD
Your security slows me down
I expect an insanely great user experience
You don’t own the device
I will use the device I want
You can’t lock my device down
You don’t own the app
You can’t say no
You don’t own the infrastructure
Copyright © 2015 Symantec Corporation3
..and the Cloud is a Risky Place for Work Data
Copyright © 2015 Symantec Corporation4
Information Protection for the Cloud
Copyright © 2015 Symantec Corporation5
What’s New in Data Loss Prevention 14
Unified ManagementExtending Data Protection for the Cloud
BoxOffice 365iOSAndroid
EmailWebFTPIM
USBHard Drives
Removable StorageNetwork Shares
Print/FaxCloud & Web Apps
File ServersExchange, Lotus
SharePointDatabases
Web ServersNetwork
Endpoint
Storage
Cloud & Mobile
Copyright © 2015 Symantec Corporation6
Dozens of New Features in DLP 14!
14VMware Fusion & Hyper-V support
Exchange 2013 Connector
Removeable storage for Mac
Browser-based uploads for Mac
Cloud Storage for Box
Media Transfer Protocol (MTP) support
Disable print screen
Auditor role for DLP policy management
Clipboard paste monitoring
PDF custom metadata tags
Enhanced Indexed Document Matching (IDM) algorithms
Enhanced SharePoint Connector
Cloud Prevent for Microsoft Office 365
Improved keyword matching performance
Modernized Enforce console
Multi-language support for Endpoint pop-ups
Remote Index Data Matching (IDM) Indexer
Amazon Web Services support
Improved Exact Data Matching technology
40+ new international data identifiers
Cloud file sync and share (Endpoint Prevent)
Copyright © 2015 Symantec Corporation7
DLP for Cloud
What it is
• Two new DLP products– Symantec DLP Cloud Storage (DLP 14.0)
– Symantec DLP Cloud Prevent for Microsoft Office 365 (DLP 12.5)
• Provide discovery, monitoring and remediation capabilities for cloud-based storage and email
Benefits
• Enables you to take advantage of the cloud with control and visibility
• Protects data regardless of it’s on-premise or in the cloud
• Easily and quickly extends current data loss policies and workflows to cloud apps
Copyright © 2015 Symantec Corporation8
DLP Cloud Storage
Features
• Scan Box Business and Enterprise Accounts to discover and tag sensitive information in Box
• Enable user self-remediation from Box (visual tags) and the DLP Self-Service Portal
• Seamless integrates with Box and your current DLP system
Benefits
• Provides visibility into the sensitive files that users are storing and sharing on Box
• Quickly and easily extends current data loss policies and workflows to Box
New in DLP 14!
Copyright © 2015 Symantec Corporation9
DLP Cloud Storage: Incident List
Copyright © 2015 Symantec Corporation10
DLP Cloud Storage: Incident Details
File Location indicates the Username and the file location in
the users Box account
Copyright © 2015 Symantec Corporation11
DLP Cloud Storage: Incident Details
Collaborators and their roles are listed in the incident
Copyright © 2015 Symantec Corporation12
DLP Cloud Storage: Incident Details
Shared link information lists permissions assigned to the link
Copyright © 2015 Symantec Corporation13
DLP Cloud Storage: Visual Tags in Box
Sensitive files are automatically tagged in Box
DLP Cloud Prevent for Microsoft Office 365
• Monitors and protects confidential email sent from your Microsoft-hosted instance of Exchange Online
• Seamlessly integrates with Exchange Online and your current Symantec DLP system
• Ensures email delivery via Symantec Email Security.cloud
BenefitsFeatures
• Lowers total cost of ownership by reducing on-premises servers and overhead
• Delivers faster time to value than on-premises solutions by leveraging IaaS
• Quickly and easily extends current data loss policies and workflows to Exchange Online
Copyright © 2015 Symantec Corporation
Copyright © 2015 Symantec Corporation15
Cloud File Sync and Share
• Endpoint Prevent now monitors and prevents users from syncing sensitive files from their desktop to could storage sites
• Applications monitored by default include:
– Box
– Dropbox
– Google Drive
– Hightail
– iCloud
– Microsoft OneDrive
BenefitsFeatures
• Reduces risk of sensitive data loss
• Prevents sensitive information from being sync’d to cloud storage sites
• Improves end-user awareness and education of security policies
Copyright © 2015 Symantec Corporation16
Improved Endpoint Agent for Mac OS
• Endpoint Prevent now monitors and prevents confidential data transfer between Mac endpoints and removable storage devices
– Save as and File copy operations supported
• Endpoint Prevent now monitors and prevents confidential data uploads using browsers on Mac endpoints
– Safari, Chrome and Firefox browsers supported
• VMware Fusion 7 support monitors data in use on a virtual Windows machine and prevents unauthorized file transfer
BenefitsFeatures
• Reduces risk of sensitive data loss Mac endpoints
• Prevents data loss from Mac endpoints
• Enables BYOD
DLP
Copyright © 2015 Symantec Corporation17
Improved Endpoint Agent for Windows
• Chrome support monitors and prevents users from transmitting from Chrome browsers
• Microsoft Hyper-V support protects data in use on virtual Windows machines residing on a Hyper-V Server
• Media Transfer Protocol (MTP) support monitors and prevents data transfer between Windows desktops and mobile devices using MTP.
BenefitsFeatures
• Reduces risk of sensitive data loss
• Prevents data loss to mobile devices
• Enables BYOD
Copyright © 2015 Symantec Corporation18
Improved Content Detection Technologies
• Improved keyword matching technology
• Exact Data Matching (EDM) now supports larger indexes (6 billion cells) and provides an enhanced algorithm– Previously supported 2 billion cells
(3x increase)
• Enhanced indexed data matching
• New Remote Indexed Document Matching Indexer allows data owners to directly fingerprint documents
BenefitsFeatures
• Up to 7x faster matching and significantly better performance with added keyword rules
• Provides faster detection and improved accuracy for extremely large structured data sources (e.g. databases)
• Up to 50x smaller indices with faster matching and no loss of accuracy
• Reduces data moved across network, improves security and fans-out fingerprinting policy
Copyright © 2015 Symantec Corporation19
Key Takeaways
1 DLP 14 extends data protection for cloud storage and email
DLP Cloud Storage scans, discovers and tags sensitive information in Box
DLP Cloud Prevent for Microsoft Office 365 monitors and protects confidential email sent from Exchange Online
Endpoint Prevent now monitors and prevents users from syncing sensitive files to cloud storage sites with a new Cloud File Sync and Share feature
23
4
Thank you!
SYMANTEC PROPRIETARY/CONFIDENTIAL – INTERNAL USE ONLYCopyright © 2015 Symantec Corporation. All rights reserved.