DLP Getting Started helps you configure Trellix DLP – SaaS product quickly and you can begin to protect your data immediately post-installation. With this feature, you can add shared location details and create your first Trellix DLP – SaaS rule and policy.
Perform the following steps to help get you started with Trellix DLP – SaaS:
License — The license page lists your acquired licenses, indicated by a checkmark next to its name.
Shared Location — Set up a shared location for storing a copy of evidence files, registered documents, and ignored text.
Note
The next four steps help you create your first Trellix DLP – SaaS policy.
Classifications — Select the data classifications you want to protect. Trellix DLP – SaaS identifies and tracks sensitive content based on these classifications. Trellix DLP – SaaS provides a list of built-in classifications to start with.
Vectors — Enable the enforcement points for where you want to protect data, and grant exclusions for any safe domains.
These vectors need Trellix DLP Endpoint - SaaS, , or Trellix DLP Network Prevent – SaaS subscription.
Email — Protect your confidential and sensitive information being sent through email. You can enter the email domains you want to exclude from this policy.
Web — Block or monitor web posts that violate a policy. You can enter the domains you want to exclude from this policy.
These vectors need a Trellix DLP Endpoint - SaaS subscription.
Clipboard — Protect your assets being copied with the Windows clipboard.
Cloud — Protect your assets being synced to cloud applications.
Network share — Protect your assets when storing in network shares.
Printer — Protect your assets from being printed.
Removable storage — Protect your assets from being written to or from removable storage devices.
Screen capture — Protect your assets from being copied using a screen capture tool.
Enforcement Mode — Choose one of these protection methods for your protection rule. Reporting incidents and storing evidence features are enabled on all enforcement modes, by default.
Stealth or Coach — Allows you to monitor data.
Note
Stealth or Coach applies this action for Trellix DLP Network Prevent – SaaS and Trellix DLP Network Monitor – SaaS protection rules, but applies different actions for Trellix DLP Endpoint - SaaS protection rules.
Block — Your DLP ruleset is created using the selected classifications and data vectors. For email protection rule, the email is blocked and returned to the sender. For web protection rule, the web transaction is blocked.
Note
When you set the Block action for a rule that applies to both Trellix DLP Network Prevent – SaaS and Trellix DLP Network Monitor – SaaS appliances, the Trellix DLP Network Monitor – SaaS appliance doesn't block data. The Trellix DLP Network Monitor – SaaS appliance only monitors data, stores evidence, and reports incidents.
Exceptions — Specify the User Groups and Users you want to exclude from this policy. If your active directory isn't set up yet, you can click the link to redirect to the Directory Services page. For more information, see Register your Active Directory server with Trellix ePO - SaaS.
You can change these configurations and add policies in DLP Getting Started later.
The DLP Getting Started feature in ePO - SaaS is as shown:
.png)