Data Loss Prevention

DLP License Assignment Mode

You can choose how DLP licenses are assigned to endpoints and manage automatic or manual allocation.

• Manual: Manually assign DLP licenses to endpoints via client actions. Licenses are assigned through client actions. If you switch to Automatic mode and no licenses are available notifications will be displayed in the EPP Console for all new subsequent registrations until you revert to Manual mode.
• Automatic: Licenses are assigned automatically when available. If no licenses are left notifications will be shown. For new customer onboardings, if the DLP License Count matches the Total License Count, the Automatic mode is used. Otherwise, the Manual mode is applied.

User Defined Dictionary

You can add certain key words, or phrases that might contain, or refer to confidential information in the User Defined Dictionary. If any of the documents on your endpoints contains the text or phrase that you have added to the User Defined Dictionary, the Data-At-Rest Scan or Data Loss Prevention feature displays the path or location of these documents.
On this page, User Defined Dictionaries can be created or managed which will be monitored through Data Loss Prevention Settings.

Adding Dictionary

To add dictionary, follow these steps:

1. Log on to the Seqrite Endpoint Protection Cloud.
2. Go to Configurations > Data Loss Prevention.
3. Click Add > Add.
4. Enter the details such as name, description and the word that you want to add.
5. Click Add.
   You can add multiple words to the dictionary.
   You can delete a word from the list by selecting a particular word and clicking Delete.

Importing Dictionary

You can also import a dictionary that you prefer to use.
To import the dictionary, follow these steps:

1. Log on to the Seqrite Endpoint Protection Cloud.
2. Go to Configurations > Data Loss Prevention.
3. Click Add > Import.
4. In the Import Dictionary dialog, click Browse. The File Upload dialog appears.
5. Select the valid exported dictionary json file (Example: DLP_Dictionary.json).
6. Click Open.
   The json file is imported.

Deleting Dictionary

You can delete a dictionary that you do not require.
To delete the dictionary, follow these steps:

1. Log on to the Seqrite Endpoint Protection Cloud.
2. Go to Configurations > Data Loss Prevention.
3. The page appears displaying list of dictionaries.
   Select the check box of the dictionary that you want to delete.
4. An action bar is enabled above the table.
   Select Delete.
5. The confirmation message appears. Click Yes.

The selected dictionary is removed.

Application

This feature lets you add the applications that you need to monitor or exclude from the DLP.

Importing Custom Applications

To create a list of custom applications, follow these steps:

1. On the Configurations > Data Loss Prevention > Application screen, click the Download button to download the DLP application whitelisting tool.

2. Open the whitelisting tool on your system. Add the application types as required, save it.
   Note that within the tool, it is necessary to input the application’s executable file along with its valid installation directory path.

It then generates a .dat file.

3. Go back to the EPS console and import the generated dat file.

The custom application list is created and reflected on the policies page.

Deleting Custom Applications

To delete the custom application(s), follow these steps:

1. Select the checkbox for the application(s) that you need to remove.
2. Click the drop-down menu. The available options are Export and Delete.
3. Click Delete.

The selected application(s) are deleted.

Exporting Custom Applications

To export the custom application(s), follow these steps:

1. Select the checkbox for the application(s) that you need to export.
2. Click the drop-down menu. The available options are Export and Delete.
3. Click Export.

The selected application(s) are exported into a .dat file.

4. Save the dat file to the preferred location for the potential future utilization.

Note:

• The DLP Custom Application feature is applicable only for the clients with Microsoft Windows operating system.
• After you confirm to delete the application, it gets auto deleted without having to save the policy.
• Applications added from the standard category will appear as per category in the list and custom application will appear in the Custom list on the DLP policy page.

Custom Classifiers

A custom list of classifiers are meant for monitoring data transfer through a channel. It is a tailored set of rules or criteria used to identify and categorize specific types of data as they move through communication channels within a network. These classifiers help in detecting, analyzing, and controlling data transfers to ensure security, compliance, and efficient data management.
By using a custom list of classifiers to monitor data transfer, organizations can enhance their data security posture, prevent data leaks, and ensure compliance with data protection standards.
To Add/Import the list of classifiers, perform the following steps:

1. Select Add/Import from the drop-down list values.
2. Enter the details in the Classifier Name, Classifier, and Description text boxes.

Click Add. Click Save Policy.

3. To import the dat file, save the list of classifiers in a dat file on a desired path. Import the dat file.

The added classifiers can now be used from the Policies > Data Loss Prevention > Data Settings > Confidential Data > Monitor Confidential Data.
Similarly, the added list can also be exported/deleted.