Solution Brief
USE CASES• Safeguard data across cloud apps,email, and the web: Employees use
email, the web, and sanctioned andunsanctioned cloud apps such as
Office365 and Box to store and sharesensitive corporate content. Secure
it all against accidental exposure ormalicious breach.

Symantec® Data Loss
Prevention Cloud Solution
Secure your most sensitive data with confidence
across cloud apps, email and the web
Solution Benefits• Protects critical data with targeted controls and policies based on user
risk and data sensitivity• Respond to security incidents:
Security incidents happen. Rich,
contextual data from CloudSOC helps
you understand what, when, who, andhow it happened, to respond quickly
to security events in the cloud.

• Delivers deep visibility of user activity across thousands of cloud apps,
email, and the web, including Shadow IT• Gain deep transaction visibility, andcontrol Shadow IT: Risky transactions
can slip under the radar in the cloud.
Collect, view, and control them all—from sanctioned or unsanctioned
apps, with options for managed andunmanaged devices—using this inline
capability.

• Monitors email and web channels in real time for immediate action
toward prevention of accidental exposure or sharing• Protect against threats: Bad actors
and malware target cloud app
accounts that are accessible directlyfrom the Internet. Protect theorganization against the impact ofcompromised cloud accounts.
• Maintain regulatory compliance:
Governments and industries require
risk analysis, monitoring, anddocumentation to maintain data
privacy and security. Fulfill theserequirements with a system that’s
effective and easy to use.
• Trust the 10-time Gartner Magic
Quadrant Leader for DLP: Competingclaims for suppliers’ cloud solutions
can be difficult to sort out. Symantec
DLP is a proven solution that Gartner,Forrester, IDC, and other leading
analysts recognize as a global market
leader.
• Monitor and prevent sensitive
data going to generative AI apps:
Monitor and inspect data-in-motion
to generative AI apps. Highlight any
risks and compliance issues these may
pose. Detect sensitive content with
DLP policies and prevent data transfer
going to these AI apps.

• Continuously monitors and protects sensitive data from potential breach• Identifies, classifies, and documents compliance for PHI, PCI, PII, andother critical data

Establish a Secure Data-Centric Foundation in theCloud
Companies are growing more distributed, driven by increases in cloud
applications, direct to cloud traffic, remote work, and bring-your-own
device initiatives. Symantec® Data Loss Prevention (DLP) Cloud provides asingle control point from which security teams can configure DLP policies
that secure SaaS apps, control access to web destinations, and identify
shadow IT.
Symantec DLP Cloud combines industry leading enterprise Data LossPrevention (DLP) and Symantec CloudSOC CASB. With it, you can extend
current policies and robust detection to cloud applications, and use richcontextual data to manage all incidents directly from the DLP console. Itdelivers deep visibility into user activity and tracks and governs activity forboth sanctioned and unsanctioned apps, including Box, Google Workspace(G Suite), and Office365.
By combining DLP Cloud and DLP Core packages, a single DLP policy canapply controls to data stored on endpoints, servers, file shares, databases,
SharePoint, and more—protecting data on premises, in the cloud, and on
the road.
Use Symantec DLP Cloud to build a solid, data-centric foundation thatsecures your most valuable assets across the cloud, email, and the web.

DLP CloudSolution Brief
Key Features and Benefits
Protection of Sensitive Data Across CloudApps, Email, and the Web
Together, DLP and Cloud Access SecurityBroker (CASB) detect and protect against
intrusions, threats, and data loss acrossyour most important business apps, email,and the web.
Unified DLP Engine
CloudSOC uses a single DLP engine todetect and remediate on-premises andcloud based violations. It features built‑in
PII, PCI, and HIPAA policies, plus a Cloud
Detection Service to create custom
policies from the Symantec DLP Enforce
console.
Compliance Enforcement
DLP enforces cloud storage, sharing,
and access policies for HIPAA, PCI, PII,
and other sensitive data. It automaticallyprotects regulated data with integrated
encryption and multifactor user
authentication.
Flexible Deployment
CloudSOC deployment options include
unified authentication, integrated
endpoints, agentless solutions, integrated
web security, proxy chaining, sharedintelligence, unified policy management,and more. Integrations with Symantec DLP
support authentication, encryption, threatprotection, and secure web gatewaysolutions.
Centralized Policies and GranularControls
A powerful policy engine delivers
efficient, fine-grained control over how
users and apps share, transfer, and use
sensitive data. One policy can apply
multiple detection methods for precision,
compound matching conditions foraccuracy, and group rules and exceptions
for individualization. BYOD options extend
real-time CASB restrictions to authorizedusers on unmanaged endpoints.
Safely Use Generative AI Apps in Your
Organization
Allow the use of AI apps such as ChatGPT
with real-time granular inspection ofsubmitted data, and prevent sensitive datafrom going to these apps.

Visibility and Control Over Data In Use,At Rest, and In Motion
DLP uses deep content inspection
and context analysis to provide acomprehensive understanding of thelocation, movement, and exposure ofsensitive data, so you can prevent data
leaks and exfiltration attempts.
Comprehensive App Coverage
DLP uses API integrations and inline
traffic analysis to monitor and control
use of sanctioned SaaS platforms. It
provides risk scoring for over 36,000 apps
using hundreds of security mechanisms,compliance certifications, and othermetrics.
High-Speed Policy Enforcement
API-based inline policy enforcement uses
ThreatScore, abnormal user behavior,threat detection, and content classification
to prevent data exposures and quickly
control access, sharing, or other app
specific actions.
Powerful UEBA Detection and Machine
Learning Risk Analysis
Symantec CloudSOC UEBA and machinelearning capabilities connect the dots
between violations, users, accounts, andassets to assign risk scores to users andincidents. Risk scores identify maliciousinsiders and outsiders, prioritize risks
across multiple platforms, and categorize
incidents tied to misaligned policies oruser mistakes.
Continuous Monitoring of Risk and
Adaptive Access Control
CloudSOC continuously monitors risks
from data loss, unsanctioned applications,malware, device security posture,compromised accounts, and other sources.
Adaptive access controls harness thisdata to protect information, with CASB
enforcement of real time policies at its
gateway to prevent exfiltration of sensitive
data, block malicious content, and keep
malicious or compromised users off cloud
applications.

DLP CloudSolution Brief
What’s Included
ProductDetails

CASB Audit

Symantec CloudSOC Audit discovers and monitors every cloud app used across anorganization, identifies their users, and highlights any risks and compliance issues
they may pose. It provides visibility into Shadow IT, and blocks access to unapproved
cloud services.

CASB for SaaS and IaaS

CloudSOC CASB for SaaS and CloudSOC CASB for IaaS are cloud-based services thatprovide visibility and control over user activities in cloud applications. They monitor
and protect stored, transferred, and shared data. A complete list of supported
cloud applications can be found in the CloudSOC online store; it includes MicrosoftOffice365, Google Workspace (G Suite), Box, Salesforce, and ServiceNow.

CASB Gateway

Symantec CloudSOC Gateway continuously monitors and controls the use of cloudapps to enforce policies, identify malicious or inappropriate data sharing, signal
malware threats, respond to security incidents, and automate escalations. It offers
deep visibility into user activity across thousands of cloud apps and services, andboth tracks and governs the activity of sanctioned and unsanctioned cloud apps.

DLP Cloud Detection Service for
CASB

Symantec DLP Cloud Detection Service inspects content extracted from cloud apps
and web traffic and automatically enforces sensitive data policies. Cloud-to-cloud
integration with Symantec CloudSOC protects data in motion and at rest across morethan 100 sanctioned and unsanctioned cloud apps, including Office 365, Google
Workspace (G Suite), Box, Dropbox, and Salesforce. The integration allows theextension of existing policies and robust detection to cloud applications, and incident
management directly from the DLP console.

DLP Cloud Detection Service forWSS

DLP Cloud Detection Service for WSS integrates with Symantec Web Security Service
to monitor even encrypted web traffic for the protection of roaming and mobile users.

DLP for Office365 and Gmail

Symantec DLP Cloud Service for Email continuously monitors corporate email traffic,
using built-in intelligence and advanced detection to minimize false positives. It
protects against data leaks in real time with automated message modification or
blocking to enforce downstream encryption or quarantine. For data shared with thirdparties, it can automatically enable identity-based encryption and digital rights foremail bodies and attachments.

DLP Cloud Bundle Add-Ons
ProductDetails

Mirror Gateway

Symantec CloudSOC Mirror Gateway is a superior solution for secure cloud accessfrom unmanaged devices. It extends CASB controls to unmanaged devices or BYOD,
giving them the same secure access to cloud apps as managed devices, with no needfor an agent.

CloudSOC Advanced ThreatProtection

Safeguard your organization in the cloud with industry-leading threat protection.
CloudSOC secures your cloud accounts and transactions against malware withSymantec Advanced Threat Protection including file reputation intelligence, A/V
scanning, and sandboxing technologies.

For more information, visit our website at: www.broadcom.com
Copyright © 2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. All
trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.
DLP-Cloud-SB101 June 1, 2023