By
Revealed: 09 Jan 2025
Of all the safety methods aimed toward making certain information safety and combating information breaches, information loss prevention instruments are far and away the commonest. DLP instruments continuously monitor and analyze information to establish potential violations of safety insurance policies and, if applicable, cease them from persevering with. DLP instruments run the gamut, from these specializing in a single a part of a corporation, similar to e mail companies or laptops, to ones specializing in information backup, archival and restoration.
Some DLP instruments embody the complete group — and these are the main target of this text. First, let’s talk about some must-have options and capabilities. Then, take a detailed take a look at seven enterprise DLP instruments for the data wanted when evaluating the most effective product on your firm’s wants.
Should-have DLP software options and capabilities
Enterprise DLP instruments comprise a variety of options and capabilities. The next are essentially the most important:
- The flexibility to routinely uncover, stock and classify delicate information and its metadata. Information is continually being created and altered, so a DLP software unable to maintain tempo with potential information leaks is at all times lacking issues.
- The flexibility to investigate information within the following circumstances:
- In any state — in use, at relaxation or in transit.
- In any location, together with consumer endpoints, on-premises servers, networks and cloud companies.
- In any utility, similar to e mail, net, messaging platforms, social media and file sharing.
- The flexibility to make use of a number of sorts of analyses to precisely discover issues. All evaluation ought to think about the context of the communication as a result of exercise that is fully regular in a single context could possibly be extremely suspicious in one other. Examples of research embody the next:
- In search of suspicious values — e.g., “confidential.”
- Doing complicated pattern-matching — e.g., to seek out bank card numbers.
- Discovering copies of identified delicate information.
- Performing statistical evaluation of knowledge exercise.
- Learning consumer habits.
- The flexibility to behave in one among a number of methods when the DLP software program discovers a possible coverage violation. For instance, in a single scenario, you may want the software to log a potential violation and alert an administrator. In one other, you may want the software to cease a knowledge switch, provoke an incident report by means of your SIEM system and instantly contain your incident response staff in dealing with the tried breach. Instruments may additionally be capable to proactively repair primary coverage violations, similar to encrypting delicate saved information.
Now, let’s take a look at a number of common enterprise DLP instruments marketed to safety groups. That is simply an outline of what is provided at this time. Many different DLP instruments can be found, every with its personal distinctive mixture of options and capabilities.
Now, let’s take a look at a number of common enterprise DLP instruments marketed to safety groups. These instruments are a sampling of what is provided at this time. Many different DLP instruments can be found, every with its personal distinctive mixture of options and capabilities. These organization-wide DLP instruments had been chosen based mostly on market analysis. They’ve sizable buyer bases, are beneath energetic growth and have publicly obtainable consumer opinions contributed by verified purchasers of DLP services. This record is organized alphabetically.
1. Digital Guardian DLP by Fortra
Key options
- SaaS DLP with automated information discovery and information classification capabilities for each identified and unknown information varieties.
- Granular insurance policies obtainable to guard delicate information and prohibit its motion.
- APIs and integration with a number of main expertise distributors.
Execs
- Helps managed companies.
- Provides glorious buyer help and on-demand coaching.
Cons
- Configuring and managing insurance policies could be difficult for some customers.
- Can reportedly trigger blue display points on some endpoints, in keeping with customers.
Modules
- Analytics & Reporting Cloud.
- Endpoint DLP.
- Community DLP.
- Administration Console.
2. Forcepoint DLP
Key options
- Performs a number of sorts of analyses, together with optical character recognition.
- Makes use of a single evaluation engine for information in movement, at relaxation and in use, making certain consistency.
- Gives coverage templates for main safety and privateness rules all over the world.
Execs
- Gives broad, extremely efficient monitoring and evaluation capabilities.
- Consumes minimal assets on endpoints.
Cons
- In accordance with customers, the training curve for deployment could be steep.
- Some customers have discovered help missing.
Modules
- Forcepoint DLP Endpoint for consumer endpoints.
- Forcepoint One CASB (cloud entry safety dealer) for common SaaS purposes.
- Forcepoint One SWG (safe net gateway) for net looking and downloads.
- Forcepoint One ZTNA (zero-trust community entry) for zero-trust distant entry.
- Forcepoint DLP — Uncover for delicate information discovery, stock and classification.
- Forcepoint DLP — Community for information being despatched over networks by means of e mail and net exercise.
- Forcepoint DLP for Cloud E-mail for information being despatched by means of outbound emails.
- Forcepoint DLP App Information Safety API for information in customized purposes and companies.
3. Palo Alto Networks Enterprise DLP
Key options
- Delivered by means of the cloud utilizing Palo Alto next-generation firewalls and administration console.
- Single coverage engine for all DLP elements.
- Provides built-in insurance policies for compliance with quite a few legal guidelines and rules.
Execs
- Designed to accommodate cellular and hybrid workforces and SaaS utility utilization.
- Customers report that setup is fast and straightforward.
Cons
- Assumes use of present Palo Alto Networks methods.
- Some customers do not discover the documentation sufficiently detailed.
Modules
- Enterprise DLP modules for bodily and digital firewalls.
- Enterprise DLP module for SaaS purposes.
- Enterprise DLP modules in Palo Alto’s Prisma Cloud and Entry choices.
- E-mail DLP module for outbound e mail in Palo Alto’s CASB providing.
4. Proofpoint Enterprise DLP
Key options
- Helps integration with Proofpoint’s information discovery and classification resolution to enhance Enterprise DLP’s effectivity.
- Takes a people-centric strategy to figuring out and stopping information loss, emphasizing context similar to content material, habits and threats.
- Can share personalized insurance policies and different configurations throughout Proofpoint DLP modules.
Execs
- Extremely customizable guidelines and dictionaries.
- Comparatively straightforward to implement in comparison with different DLP merchandise, in keeping with many customers.
Cons
- Standalone e mail DLP requires separate dashboards for different DLP use instances, though Enterprise DLP presents a single, multichannel dashboard.
- Legacy UI in want of a refresh, in keeping with some customers.
Modules
- Enterprise DLP, which incorporates endpoint DLP, cloud DLP and e mail DLP capabilities.
- Endpoint DLP.
- E-mail DLP.
- Cloud DLP in Proofpoint’s CASB providing.
5. Symantec Information Loss Prevention by Broadcom
Key options
- Gives a single console for monitoring and managing all DLP elements.
- Makes use of a single coverage mechanism for all its detection and enforcement capabilities.
- Provides a wide range of enforcement capabilities, together with integration with Microsoft Purview Data Safety.
Execs
- Many customers discover the UI versatile and straightforward to make use of.
- Quick information discovery and powerful detection of coverage violations reported.
Cons
- Thought of costlier than most different DLP instruments.
- Some customers have discovered technical help missing. Additionally, integrations is perhaps difficult and require additional help or skilled companies.
Modules
- DLP Core Resolution, a collection of 9 on-premises elements, together with DLP Endpoint Uncover, DLP Community Shield and DLP Delicate Picture Recognition.
- DLP Cloud Resolution, a bundle of six cloud-based elements with two add-ons.
6. Trellix Information Safety (previously McAfee)
Key options
- Provides a number of strategies for safeguarding delicate info, together with choices to dam information from the next:
- Being saved to USB drives and different media.
- Being recorded through display captures.
- Being despatched to printers.
- Being posted to web sites.
- Provides integrations with third-party instruments for information classification, orchestration and incident response.
- Gives sturdy, versatile choices for information classification.
Execs
- Many customers take into account the information safety strategies extremely efficient.
- Customers just like the administration console’s UI.
Cons
- Some customers have reported configuration difficulties and a steep studying curve.
- Brokers typically run slowly or intrude with different purposes.
Modules
- Trellix DLP Uncover.
- Trellix DLP Community Forestall.
- Trellix DLP Community Monitor.
- Trellix DLP Endpoint Full.
- Trellix DLP Gadget Management.
7. Zscaler Information Safety
Key options
- A cloud-based safety service edge suite of services that features cloud, e mail and endpoint DLP.
- Gives safety and monitoring for endpoints whether or not or not they’re internet-connected.
- Doesn’t must route any consumer site visitors by means of on-premises networks for monitoring or enforcement functions.
Execs
- Usually straightforward to deploy and handle, in keeping with customers.
- Requires no on-premises home equipment or different {hardware}; extremely scalable.
Cons
- Service largely relies on web connectivity, with lags reported.
- Some clients discovered documentation on configurations underwhelming.
Modules
- Zscaler Precise Information Match for fingerprinting delicate information.
- Zscaler Index Doc Match for fingerprinting delicate paperwork.
- Zscaler Optical Character Recognition for classifying information in pictures.
Karen Scarfone is principal advisor at Scarfone Cybersecurity in Clifton, Va. She offers cybersecurity publication consulting to organizations and was previously a senior pc scientist for NIST.
Dig Deeper on Information safety and privateness
