IronPort - Configuration Guide - AsyncOS 7.6.1

OL-25136-01
Data Loss Prevention
CHAPTER
11
In the Information Age, your organization’s data is one of its most prized possessions. Your organization
spends a lot of money making data available to your employees, customers, and partners over email and
the Web. This increased access poses challenges for information security professionals to figure out how
to prevent the malicious or unintentional distribution of sensitive and proprietary information over the
Internet.
Cisco provides the following methods to protect your organization’s information and intellectual
property and enforce compliancy with state and federal regulations using the Email Security appliance:
RSA Email DLP. A solution local to the Email Security appliance that includes an integrated data
loss prevention (DLP) scanning engine and DLP policy templates designed by RSA Security Inc. to
identify and protect sensitive data.
RSA Enterprise Manager. Users of RSA’s Enterprise Manager can partner their Email Security
appliances with the Enterprise Manager software and use RSA’s DLP technologies to scan outgoing
message. Whereas RSA Email DLP is local to an individual Email Security appliance, RSA
Enterprise Manager allows you to manage multiple Email Security appliances on the same network
from a centralized interface. Users of RSA’s DLP Datacenter can use its fingerprinting detection
method for scanning source code and documents in certain DLP policies. Enterprise Manager is a
third-party software from RSA and cannot be purchased from Cisco.
Note This chapter describes how to configure the settings on the Email Security appliance to connect it to
Enterprise Manager and provides an overview of how the appliance works as an Enterprise Manager
partner device. For information on configuring the Enterprise Manager and its DLP policies, see RSA’s
documentation for Enterprise Manager, including the online help and the technical note Managing
Partner Device DLP with Enterprise Manager.
Data Loss Prevention Overview, page 11-2
Data Loss Prevention Global Settings, page 11-2
Message Actions, page 11-5
RSA Email DLP, page 11-8
DLP Policies, page 11-10
RSA Enterprise Manager, page 11-27
Configuring Per-Recipient Policies for DLP, page 11-31
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
11-1