Endpoint DLP Plus
Endpoint DLP software for discovering sensitive files and restricting their movement.
For managed endpoints where sensitive files are stored, shared, printed or transferred.
Discover and restrict sensitive endpoint data movement
Sensitive files can be copied, uploaded, printed or transferred from endpoints through several channels. Without a way to identify those files and record their movement, it is difficult to apply handling rules consistently.
Endpoint DLP Plus discovers sensitive endpoint files, classifies them and tracks relevant activity. Its policies restrict defined transfer, upload, email, print and removable-media actions, with audit records for monitored activity and policy outcomes.
Where Endpoint DLP Plus is used
Endpoint DLP Plus is suited to applying data-handling policies where sensitive files are copied to USB storage, uploaded through browsers, attached to outbound email or sent to printers. It also covers sensitive data displayed on screen by restricting screenshots, screen recordings and clipboard transfers. File activity records support review of copies, modifications, uploads, prints, deletions and transfers.
Fits within these solutions
Suitable environments
The product applies to managed endpoints holding sensitive files and data that is copied, modified, uploaded, printed, emailed or transferred through removable media.
Benefits
Identify Sensitive Data
Finds sensitive files on endpoints before applying handling restrictions.
Consistent File Handling
Uses labels and policies to apply defined restrictions to sensitive files.
Restricted Data Movement
Limits defined routes for moving sensitive data from managed endpoints.
Recorded File Activity
Provides audit records for monitored file actions and policy outcomes.
Capabilities
Sensitive File Discovery
Discovers sensitive files stored on managed endpoints.
Content Classification
Labels files using predefined or custom templates and source application context.
Image OCR Detection
Detects sensitive data contained in images using OCR.
File Activity Tracking
Tracks sensitive file copies, modifications, uploads, prints, deletions and transfers.
Screen and Clipboard Controls
Blocks screenshots, screen recordings and clipboard transfers involving sensitive on-screen data.
Data Transfer Restrictions
Restricts sensitive transfers to USB media, uploads, email attachments and printing.
Common Use Cases
Removable Media Transfers
Apply restrictions when sensitive files are transferred to USB storage or removable media.
Browser File Uploads
Restrict uploads of sensitive files through monitored browser and web application channels.
Outbound Email Attachments
Restrict outbound email attachments containing sensitive files under defined policies.
Sensitive Document Printing
Restrict printing of sensitive files and add watermarks to approved prints.
On-screen Data Handling
Block screen capture and clipboard transfers involving sensitive data displayed on screen.
