Trellix DLP Discover – SaaS runs on Microsoft Windows servers and scans network file systems to identify and protect sensitive files and data.
Trellix DLP Discover – SaaS is a scalable, extensible software system that can meet the requirements of any size network. Deploy Trellix DLP Discover – SaaS software to as many servers throughout the network as needed.
ePO - SaaS uses Trellix Agent to install and deploy the Trellix DLP Discover – SaaS software to a Discover server — a designated Windows Server.
ePO - SaaS applies the scan policy to Discover servers, which scan the repository at the scheduled time. The data collected and the actions applied to files depend on the scan type and configuration.
Use ePO - SaaS to perform configuration and analytics tasks such as:
Displaying available Discover servers
Configuring and scheduling scans
Configuring policy items such as definitions, classifications, and rules
Reviewing data analytics
Reviewing incidents generated from remediation scans
Trellix DLP Discover – SaaS workflow
Trellix DLP Discover – SaaS workflow diagram
ePO - SaaS configures a scan by applying policies, rules, and schedules to the Discover server.
Discover Server runs the scans, applies classifications, rules, and collects the scan results.
Discover Server reports the incidents and operational events from the scan to ePO - SaaS. You can view these incidents in the Incident Management page and operational events in the Operational Event Management page.
Discover Server sends evidence files of incidents to Amazon S3. You can view these evidence files on ePO - SaaS.
Supported repositories
File Server repositories — includes the following repository types:
Common Internet File System (CIFS)
Server Message Block (SMB)
Network File System (NFS) 2, 3