data loss prevention (DLP) products

[WaterRide]

We're looking to implement DLP.  If you have it where you are, what are the strengths and weaknesses of DLP products you currently have?

[insyder5000]

I inherited a Symantec DLP instance about 3 years ago. Learning curve was kind of steep I'm still learning new things and tricks. Setting up and maturing the processes was probably one of the tougher parts but once you got everything configured and running modifying and changing policies is pretty straight forward. Another downside was the need for a physical Oracle Database server for the backend. I keep getting told support for virtualization is coming but their support says its still not supported.

[sud0nick]

On 12/9/2016 at 7:01 AM, insyder5000 said:

...Another downside was the need for a physical Oracle Database server for the backend. I keep getting told support for virtualization is coming but their support says its still not supported.

Will DLP not work if your Oracle DB is on a VM?  If that's the case it's very strange.  According to this article Symantec won't support that configuration simply because it's not certified by Oracle, although Oracle will provide support for DB issues even if the server is hosted in a virtual environment.  Where I work we have a few Oracle DB servers on VMs and I don't think we've had any problems because of it.

[insyder5000]

It's pretty much because of that article. I know it could work in a virtualized environment because we have other projects moving oracle DB's to a virtualized infrastructure but if they simply won't support it management isn't willing to risk it.