User Guide

17-3
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 17 Data Loss Prevention
DLP Deployment Options
The appliance then assigns the severity level (such as Critical or Low) that you have defined for that risk
factor score, and performs the message action that you have specified for that severity level in the
applicable DLP Policy.
DLP Deployment Options
RSA Email DLP RSA Enterprise Manager
All DLP activities are handled by the Email
Security appliance.
Third-party DLP management software from RSA
that runs on a server and works with your Email
Security appliance as “partnered devices.”
Note RSA Enterprise Manager cannot be
purchased from Cisco.
Manages DLP policies on a single Email Security
appliance, except in a cluster deployment.
Manages DLP policies for multiple devices on the
same network, including multiple Email Security
appliances, from a centralized interface.
You configure DLP policies on the Email Security
appliance.
Policies are configured in Enterprise Manager and
pushed to the Email Security appliances on your
network, for consistent DLP policies across your
organization.
Includes over 100 DLP policy templates designed
by RSA that your organization can use to define
the sensitive data that your users cannot send using
email.
Includes RSA’s DLP policy templates and
integrates with RSA’s DLP Datacenter to use
fingerprinting detection method for scanning
source code and documents in certain DLP
policies.
Fingerprinting is described in Fingerprinting,
page 17-26.
View and manage quarantined messages on the
Email Security appliance or on a Security
Management appliance.
Quarantined messages are stored on the Email
Security appliance or on a Security Management
appliance.
You can view quarantined messages on Enterprise
Manager, on an Email Security appliance, or on a
Security Management appliance.
You must manage quarantined messages (for
example, delete or release them) using Enterprise
Manager.
View and search reporting and tracking data on the
Email Security appliance or on a Security
Management appliance.
View and search reporting and tracking data on
Enterprise Manager, on the Email Security
appliance, or on a Security Management
appliance.
— Migrate the existing DLP configuration from your
Email Security appliance to Enterprise Manager.
For more information, see RSA Email DLP,
page 17-4.
For more information, see RSA Enterprise
Manager, page 17-23.