Data Loss Prevention

TMWS provides Data Loss Prevention (DLP) profiles to make it easier to track and document sensitive data, and safeguard your organization's confidential information against accidental disclosure and intentional theft.

Administrators can add DLP profiles to scan outbound HTTP traffic for content including sensitive data and apply them to cloud access rules for enhanced protection.

Note:

This feature is not available for the Standard license. To use this feature, purchase an Advanced license, or you can purchase an add-on license to upgrade your service to the Advanced (Standard plus add-on) license.

  1. Go to Policies > SECURITY TEMPLATES > Data Loss Prevention.
  2. Manage Data Loss Prevention profiles.

    Task

    Details

    Add/Edit a Data Loss Prevention profile

    Click Add or select an existing Data Loss Prevention profile under Profile Name, and then specify the settings on the screen that appears. For details, see Configuring A Data Loss Prevention Profile.

    Delete a Data Loss Prevention profile

    Select one or several Data Loss Prevention profiles to delete and then click Delete.

    Note:

    If a Data Loss Prevention profile is in use by a cloud access rule, it cannot be deleted. To delete it, remove it from the cloud access rule first.

    Duplicate a Data Loss Prevention profile

    This feature is a convenient way of adding a new Data Loss Prevention profile with settings similar to an existing profile.

    Select a Data Loss Prevention profile and click Duplicate. Under Profile Name, click the duplicated profile and then specify settings on the new screen that appears.

    Note:

    You can duplicate only one Data Loss Prevention profile at a time.

    Sort the profile information

    Sort the information in ascending or descending order in either of the following ways:

    • Click the title area of a column.

    • Click the up or down arrow at the right of the title area of a column.

    View data in table columns

    • Profile Name: Name of a Data Loss Prevention profile.

    • Data Loss Prevention Templates: Trend Micro predefined compliance templates that the Data Loss Prevention profile applies to.

    • Action: Action on the outbound HTTP traffic for content including the sensitive information identified in the Data Loss Prevention Templates section.

      • : Users can transmit the data over the Internet but TMWS logs this user activity for monitoring and analysis.

      • : Users cannot send the data out of your organization's network.

    • Cloud Access Rules: Cloud access rules that use the Data Loss Prevention profile.

    Search for a Data Loss Prevention profile

    Type a keyword or part of the keyword related to either column in the table in the Search text box.

    Note:

    If there are many entries in the table, type some characters in the Search text box to narrow down the entries. As you type, the entries that match the characters you typed are displayed immediately. TMWS searches all cells in the table for matches.