Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 8990 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Data Protection and SSL

JSWVLCM

Hi, I was wondering if anyone could tell me whether or not Data Protection works with SSL-encrypted traffic on the endpoints.  For example, will a properly configured Data Protection policy prevent designated sensitive information from being transmitted from an endpoint to an external source if the mechanism providing the transport is encrypted via SSL?  I had a customer recently ask about this and wasn't sure what to tell them.  I also searched through the associated guides and haven't found confirmation of this.

Any insight on this would be appreciated.

Thanks!

:54501


This thread was automatically locked due to age.
Parents
  • 0

    Thanks Christian that helps explain things.  I guess maybe what the customer was thinking is if you have the Data Protection (DLP) policy enabled in SEC and enforced on your endpoints, if someone copies/pastes sensitive information that's been defined in your Data Protection policy into an SSL-protected application like Gmail or maybe an email message in Outlook that's been configured for SSL/TLS via Microsoft's Office 365, will it be blocked on the endpoint and/or prohibited from leaving the customers network?  If you think it would be better for me to ask about this on the DLP board I can do that.

    :54531
Reply
  • 0

    Thanks Christian that helps explain things.  I guess maybe what the customer was thinking is if you have the Data Protection (DLP) policy enabled in SEC and enforced on your endpoints, if someone copies/pastes sensitive information that's been defined in your Data Protection policy into an SSL-protected application like Gmail or maybe an email message in Outlook that's been configured for SSL/TLS via Microsoft's Office 365, will it be blocked on the endpoint and/or prohibited from leaving the customers network?  If you think it would be better for me to ask about this on the DLP board I can do that.

    :54531
Children
No Data