Content Awareness vs DLP

[Matlu]

Hello, everyone.

Is there any specific difference between the use of the blades exposed in the SUBJECT of the POST?

According to the documentation I review, they both have "capabilities" to lock content such as files, folders, etc.

But they seem to have the same "purpose".
So, which one is more recommendable, to use in a production environment?

Do both blades protect LAN -> WAN      and     WAN -> LAN traffic?

Thanks for your comments.

[the_rock]

Below should help

Andy

https://community.checkpoint.com/t5/Security-Gateways/Content-Awareness-not-working-properly/m-p/178...

https://community.checkpoint.com/t5/Security-Gateways/Content-awareness-question/m-p/152043#M26152

https://community.checkpoint.com/t5/Management/Content-Awareness-things-that-do-not-work/m-p/139442#...

Gist of is this...with content awareness and dlp, you NEED https inspection on.

As far as differences, see this

https://community.checkpoint.com/t5/General-Topics/What-different-for-Content-Awareness-and-Data-Los...

[Matlu]

Buddy,

So, in order to make sense, either using "CONTENT AWARENESS" or "DLP", you should have "Enabled" already, the HTTPs Inspection?

If we don't have it enabled, those blades will not work correctly?

[the_rock]

You can use them still, but you wont get full benefits if inspection is off.

Andy

[Matlu]

It is clearer to me.

Anyway, both blades, CONTENT and DLP, can work in both directions, can't they?

Both incoming traffic (from the Internet to the LAN) and outgoing traffic (from the LAN to the Internet), right?

[the_rock]

yup