Data Loss Prevention

 View Only
  • 1.  How can I detect and prevent binary file in Symantec DLP

    Posted Apr 03, 2013 12:42 PM

    Hi Can Anyone tell me how can I prevent or detect binary files in symantec DLP.



  • 2.  RE: How can I detect and prevent binary file in Symantec DLP

    Trusted Advisor
    Posted Apr 04, 2013 02:55 AM

    Hi,

     you can use standard filetype definition (win exe, mac exe, unix exe,...)  in your policy or even create your own detecttion script to detect some other type of binary file.

     

     regards



  • 3.  RE: How can I detect and prevent binary file in Symantec DLP

    Broadcom Employee
    Posted Apr 04, 2013 03:00 AM

    can you tell what exactly you want to achieve?

     



  • 4.  RE: How can I detect and prevent binary file in Symantec DLP

    Posted Apr 13, 2013 01:55 PM

    Hi

    This questioned was asked someone during the technical interview so kindly give some idea for above question.



  • 5.  RE: How can I detect and prevent binary file in Symantec DLP

    Broadcom Employee
    Posted Apr 13, 2013 10:46 PM

    do you mean stop executing of exe files?



  • 6.  RE: How can I detect and prevent binary file in Symantec DLP
    Best Answer

    Posted Apr 15, 2013 06:15 AM

    Hi Salim,

    if you asking about monitoring the execution of exe (binary files ) then you can use application monitoring feature of DLP which can monitor and block.

    Application monitoring lets you monitor third-party applications for IM, email, or HTTP/S clients. By default, Symantec Data Loss Prevention only monitors first-party applications such as AIM, Microsoft Outlook, or Mozilla Firefox. Examples of third-party applications include Skype, Mozilla Thunderbird, or Google Chrome. Any application that is not specifically monitored by Symantec Data Loss Prevention must be added to the Application Monitoring page before Symantec Data Loss Prevention can begin monitoring.

    Also if you asking about transderring of binary files the you need IDM technology to implement throgh the hasing such kind of data.

    Also please refer below

    https://www-secure.symantec.com/connect/forums/dlp-skype-support#comment-8051291

    https://www-secure.symantec.com/connect/forums/how-create-script-custom-file-type-detection-symatnec-data-loss-prevention-dlp

    https://www-secure.symantec.com/connect/forums/detection-customization-file-analyzer



  • 7.  RE: How can I detect and prevent binary file in Symantec DLP

    Posted Apr 16, 2013 01:51 PM

    Hi Salim,

    What kind of binary file you want to monitor and block as audio,video and exe files are binary then how will u consider. above links are enough to provide you the resolution. I think IDM/hashing of data is better way to achive above



  • 8.  RE: How can I detect and prevent binary file in Symantec DLP

    Posted Apr 16, 2013 02:25 PM

    I got for which I was looking , It can be done using the Application monitoring feature,

    Thanks all for your ref.