Trellix DLP provides comprehensive protection for all potential leaking channels, including removable storage devices, the cloud, email, instant messaging, web, printing, clipboard, screenshot, and file-sharing applications.
Compliance enforcement — Ensure compliance by addressing day-to-day user actions, such as emailing, cloud posting, and downloading to removable media devices.
Advanced protection — Apply fingerprinting, classification, and file tagging to secure sensitive, unstructured data, such as intellectual property and trade secrets.
Scanning and discovery — Scan files and databases stored on local endpoints, shared repositories, or the cloud to identify sensitive data.
User education — Provide real-time feedback through educational pop-up messages to help shape corporate security awareness and culture.
Centralized management — Integrate with ePO - On-prem software to streamline policy and incident management.
Trellix Device Control key features
Trellix Device Control is a Trellix® Agent plug-in available in Windows and macOS versions.
Controls what data can be copied to removable devices, or controls the devices themselves. It can block devices completely or make them read-only.
Provides protection for USB drives, smartphones, Bluetooth devices, and other removable media.
Prevents executables on removable media from running. Exceptions can be made for required executables such as virus protection.
Trellix Data Loss Prevention Discover key features
Detects and classifies sensitive content.
Creates registered document signature databases.
Moves or copies sensitive files.
Integrates with Microsoft Rights Management Service to apply protection to files.
Automates IT tasks, such as finding blank files, determining permissions, and listing files that changed within a specified time range.
Supports Optical Character Recognition (OCR) for classification, remediation, and registration scans of file-based repositories.
Trellix Data Loss Prevention Endpoint key features
Trellix DLP Endpoint includes all Trellix Device Control features.
Classification engine applies definitions and classification criteria that define the content to be protected, and where and when the protection is applied.
Protection rules apply the classification criteria and other definitions to protect the sensitive content.
Protects against data loss from:
Clipboard software
Cloud applications
Email
Network shares
Printers
Screenshots
Application file access
Web posts
Removable storage
Local file system files
Note
Screenshots protection is not currently supported on macOS
The Trellix DLP Endpoint discovery crawler runs on the local endpoint, searches local file system and email storage files and applies policies to protect sensitive content.
Trellix Data Loss Prevention Endpoint for Mac key features
Trellix DLP Endpoint for Mac includes all Trellix Device Control features.
Classification engine applies definitions and classification criteria that define the content to be protected, and where and when the protection is applied.
Protects against data loss from:
Cloud applications
Clipboard software
Network shares
Printers
Removable storage
Local file system files
Application file access
Web posts
Email
Trellix Data Loss Prevention Network Prevent key features
Trellix DLP Network Prevent interacts with your email and web traffic, generates incidents, and records the incidents in ePO - On-prem for subsequent case review.
Proactively enforces policies for all types of information sent over email or web.
Enforces policies for the information you know is sensitive and the information you might not know about.
Filters and controls sensitive information to protect against known and unknown risks.
Provides a wide range of built-in policies and rules for common requirements, including regulatory compliance, intellectual property, and acceptable use.
Supports Optical Character Recognition (OCR) for scanning images attached to emails. The images can also be .pdf files created by a document scanner.
Trellix DLP Network Monitor key features
Analyzes the traffic of well-known TCP protocols to identify users or devices that send a high volume of unknown traffic, which might indicate a violation of company policy.
Analyzes points of data loss without impacting your network to help you plan your data loss prevention strategy.
Supports protocols that are not proxied by other email or web gateways.
Monitors network traffic for devices that do not have Trellix DLP installed.
Provides a wide range of built-in policies and rules for common requirements, including regulatory compliance, intellectual property, and acceptable use.
Supports Optical Character Recognition (OCR) for scanning images attached to web posts or images found in other network traffic.
Trellix DLP Network Prevent and Trellix DLP Network Monitor appliances that have the DLP Capture feature enabled also:
Capture content to analyze later for keywords, user activity, or file name to identify potential data loss incidents missed by active email protection, web protection, or network communication protection rules.
Allow complete customization of email, web, or network communication protection rules for testing using the DLP Capture database.