Trellix DLP Network Prevent receives ICAP connections from a web proxy server, analyzes the content, and determines if the traffic should be allowed or blocked.
How it works
Users send web traffic to the web proxy server.
The web proxy server forwards the web traffic to Trellix DLP Network Prevent.
Trellix DLP Network Prevent inspects the web traffic, and returns a response to the web proxy server to allow the traffic through to the destination server or deny access.
4a/4b — Based on the information from Trellix DLP Network Prevent, the Web Proxy server:
Sends or delivers the inspected web traffic to the appropriate destinations.
Blocks the web traffic and sends an event to ePO - On-prem.
Registered documents server defines sensitive information, to protect it from being distributed in unauthorized ways.
