Goal: To establish an integrated solution which stops inbound threats like phishing and ransomware, and prevents outbound data loss from email, blocking sensitive data exfiltration before a breach occurs.
Solution: Integrate Trellix DLP with Email Security - Cloud to enforce data security policies on your organization's emails. This integration provides seamless two way protection which prevents inbound threats and stops outbound data loss. It also centralizes management, allowing you to configure DLP rules and applying them to email traffic directly from the Trellix ePO - SaaS platform.
Configure Trellix DLP rules
Create DLP rule set.
In ePO - SaaS, go to Menu → Data protection → DLP Policy Manager.
Click the Rule Sets tab and select Actions → New Rule Set.
Enter the name and optional description, then click OK.
Create rules and assign them to rule sets.
Navigate to Policy Manager → Actions → New rule → Email protection.
Name the rule and set its state to Enabled.
Under the Enforce on section, check the Trellix DLP Integrations check box.
On the Condition tab, update the Classification of row with the specific classification details you created and update other sections as required.
On the Reaction tab, go to the Trellix DLP Integrations section. Update the Action and Report Incident row as required and click Save.
Assign rule sets to policy.
Create a Policy.
First create a policy to apply the rule set to. For more information, see Create a Policy.
Enable the policy on the DLP settings page.
Go to DLP settings → Integrations tab.
Check the Enable Integrations check box.
Under DLP Policy Pushed drop down, select the policy that you created.
Assign the rule sets to a policy.
Navigate to Policy Assignment → Actions → Assign Rule sets to a Policy.
Select the Policy and the Rule set that you want to assign and click OK.
Navigate to Assign Rule sets to a Policy → Actions → Apply selected policies.
On the confirmation pop-up screen, click OK to complete the assignment.
Configure Email Security - Cloud rules
You must configure some settings in Email Security - Cloud and establish the necessary connections to ensure it's ready to communicate with Trellix DLP. For the complete step-by-step instructions on how to prepare Email Security - Cloud for this integration, see the Email Security - Cloud Admin guide.