topic Re: Offline DLP in SASE and Remote Access

Offline DLP

Agent_Smith — Fri, 31 Mar 2023 16:47:25 GMT

We would like to know if there is a way to use Endpoint to enforce DLP when a user is not VPN to the main firewall. If not can we force a laptop to VPN and have no off network internet access? How would we do this from the Checkpoint side?

Re: Offline DLP

Chris_Atkinson — Fri, 31 Mar 2023 22:44:40 GMT

Depending on the specific scenarios that you are trying to cater to the following may have a role to play:

Media Encryption and Port Protection
Harmony Connect - Internet Access
Harmony Email & Colab
Capsule Workspace / Capsule Docs.

Re: Offline DLP

PhoneBoy — Sat, 01 Apr 2023 00:37:41 GMT

This ultimately requires Harmony Endpoint features such as:

Endpoint Firewall and Compliance
Media Encryption/Port Protection

Additional features will be coming in the next few months that may be relevant DLP-wise.

Re: Offline DLP

Agent_Smith — Wed, 05 Apr 2023 15:40:14 GMT

Specifically we are trying to stop exfiltration of lets say, social security numbers on form posting on https and email.

Re: Offline DLP

PhoneBoy — Thu, 06 Apr 2023 16:33:30 GMT

In terms of current product functionality, that would have to be done by Harmony Connect with HTTPS Inspection enabled.

Re: Offline DLP

Agent_Smith — Fri, 07 Apr 2023 18:02:35 GMT

Later when the DLP for Endpoint comes out it won't do this type of DLP and it has to be offloaded to Harmony Connect?

Re: Offline DLP

PhoneBoy — Fri, 07 Apr 2023 23:16:04 GMT

Presumably, yes.