Protecting files with rights management

Prev Next

Trellix DLP Endpoint and Trellix DLP Discover can integrate with rights management (RM) servers to apply protections to files that match rule classifications.

Trellix DLP Endpoint and Trellix DLP Discover supports applying policies with Microsoft RMS on-premises, and Azure RMS.

Important

When using Azure RMS, you must install Azure Information Protection 2.6.111 on each endpoint using RM services. The Apply RM command does not work without this version of the RM client.

  • Trellix DLP Network Prevent and Trellix DLP Network Monitor can identify if an email or an attachment has RM protection applied to it, but, they do not support applying RM policies.

You can apply an RM policy reaction to these data protection and discovery rules:

  • Cloud protection

  • Endpoint file system discovery

  • Removable storage protection

  • (For Trellix DLP Discover only) Network share protection, including

    • Box protection

    • File Server protection

    • SharePoint protection

Trellix DLP can recognize RM protected files by adding a file encryption property to either content classification or content fingerprinting criteria. These files can be included or excluded from the classification.