Powerful threat prediction, prevention, detection, and response along with compliance in a scalable, simple managed solution.
All-in-one networking solution that combines network connectivity, agility, security, and compliance in an affordable managed solution.
Accelerate business growth through our award-winning partner program.
Applies To: Symantec DLP 14.5 and Above Version
The Symantec Data Loss Prevention Enforce Server is the central management platform that enables you to define, deploy, and enforce data loss prevention and security policies. The Enforce Server administration console provides a centralized, web-based interface for deploying detection servers, authoring policies, remediating incidents, and managing the system.
EventTracker can integrate with Symantec DLP to capture the logs triggered for policy violations by the user. It also helps to visualize the policy violation and audit activities (policy changes, system management) happening on Symantec DLP. It will trigger the alerts whenever the user violates any policies. Reports will give you the details about audit activities and policy violation.
Syslog messages from Symantec DLP can be forwarded to EventTracker Enterprise and based on these logs, alerts and reports can be configured in EventTracker.
EventTracker Knowledge Pack for Symantec DLP allows you to monitor the following components: -
Once Symantec DLP is configured to deliver events to EventTracker Manager; Knowledge objects and reports can be configured into EventTracker.
Some of the Knowledge Packs available in EventTracker are listed below. For more information, refer Integration Guide.
Alerts
Reports
The configuration details in this guide are consistent with EventTracker version 9.x and later, and Symantec DLP 14.5 and above version.
For more information, refer the Symantec DLP Integration guide.