The two core functions of Data Loss Prevention technologies are to accurately identify sensitive data in its many forms and then to prevent the loss of that data. DLP coverage capabilities vary. Solutions are commonly categorized into two groups based on that coverage: Enterprise DLP (EDLP) and Integrated DLP (IDLP). DLP coverage is not the only differentiation between EDLP and IDLP.
Enterprise DLP
Enterprise DLP technologies are purpose built solutions to prevent data loss across the leakage vector spectrum, including at the network gateway (data in motion), in storage (data at rest) and at the endpoint (data in use). Prominent EDLP Vendors include Digital Guardian, Forcepoint, McAfee and Symantec.
Integrated DLP
By contrast, Integrated DLP tools were designed to address requirements other than DLP, but have some ability to inspect outbound data. IDLP solutions generally offer coverage limited to a single protocol (e.g. email, web) or a single DLP component (e.g. data in motion, data at rest). Examples of IDLP solutions include: email security, email encryption, web security, discovery and device control.