Symantec Data Loss Prevention

Version: Symantec DLP 14.5 and Above Version

The Symantec Data Loss Prevention Enforce Server is the central management platform that enables you to define, deploy, and enforce data loss prevention and security policies. The Enforce Server administration console provides a centralized, web-based interface for deploying detection servers, authoring policies, remediating incidents, and managing the system.

Netsurion Open XDR integrates with Symantec DLP to capture the logs triggered for policy violations by the user. It also helps to visualize the policy violation and audit activities (policy changes, system management) happening on Symantec DLP. It will trigger the alerts whenever the user violates any policies. Reports will give you the details about audit activities and policy violation.

Syslog messages from Symantec DLP can be forwarded to Netsurion Open XDR and based on these logs, alerts and reports can be configured in Netsurion Open XDR.

Netsurion Data Source Integration for Symantec DLP allows you to monitor the following components: –

• Security – Policy Violation and Audit Activities.
• Compliance –  User Login and Logout and Authentication Failures.
• Operation – Web Activities.

Once Symantec DLP is configured to deliver events to Netsurion Open XDR Manager; Knowledge objects and reports can be configured into Netsurion Open XDR.

To take advantage of this data source integration and to learn more about alerts, reports, and dashboards, contact your Technical Account Manager (TAM). If you are not currently a Netsurion customer or partner, contact us to learn more.