On Tuesday, in an effort to step up its cloud security game, Symantec Corp. launched a new version of data loss...
prevention product with cloud DLP capabilities.
Symantec Data Loss Prevention 14, available today, is the first DLP product from the vendor to cover cloud services and SaaS. Symantec DLP 14 allows enterprises to perform content-aware scans and set policies for both on-premise infrastructure and cloud services.
"We wanted to upgrade our DLP product, which is pretty well known in the on-premise world, to the cloud," said Mario Espinoza, senior director of product management, information protection, at Symantec. "Clients are living in a hybrid world today with both on-premise and cloud, and they wanted a DLP product that could protect data in both places."
Symantec DLP 14 includes DLP Cloud Storage, which performances data scanning and discovery for cloud storage provider Box. DLP Cloud Storage allows enterprises to monitor and analyze employees' Box accounts and place visual tags on files that contain sensitive data.
Espinoza said Symantec worked closely with Box to make sure DLP 14 addressed enterprise concerns about having better cloud visibility into services like Box.
"We have very strong relationship with Box. They actually modified their APIs so that we can scan them for corporate data," he said. "We're already working on extending [DLP Cloud Storage] to other cloud storage partners."
In addition to DLP Cloud Storage, Symantec DLP 14 also integrates with Microsoft Office 365 and allows enterprises to apply policies and scan Microsoft's cloud-based email service. The cloud DLP product can also monitor and protect data in Office 365 deployments in Amazon Web Services and Rackspace, as well as Microsoft Azure. Espinoza said the company is also working on expanding DLP 14's capabilities to other cloud email providers.
Symantec DLP 14 also comes with new features such as Cloud File Sync and Share, which blocks the syncing or sharing of sensitive files from an employee's system to public cloud storage services such as Box, Dropbox, and Google Drive. Espinoza said the feature uses lightweight agents that are placed on Windows and MacIntosh systems and monitor the use of sensitive data; currently, the agents are only compatible for desktops; laptops and servers and are not available for smaller mobile devices such as smartphones and tablets.
The cloud DLP product also comes with a revamped user interface for the DLP Enforce management console to make it easier for security managers to track both on-premise assets, mobile devices, and cloud apps and services. Symantec said enterprises can buy the on-premise version of DLP 14, the cloud version, or both.
While Symantec has struggled of late with its cloud security strategy, the company remains the largest security software maker in the world in terms of revenue with $3.7 billion in 2014. Symantec is also a leader in the growing DLP market, according to Gartner, accounting for nearly half of the total market.
"DLP is our fastest-growing product segment in the company," Espinoza said. "We're seeing triple digit growth this year, and cloud is making DLP even more relevant."
Find out why the Symantec-Veritas split was inevitable