BigFix Data Leak Prevention 1.1
Strengths: Powerful agent-based endpoint data leakage protection for data moving both on the network and through peripherals
Weaknesses: Nothing we came across
Verdict: For its ease of use and deployment, good pricing and comprehensive protection, we award the BigFix DLP our Best Buy
BigFix Data Leak Prevention (DLP) is a full-featured part of the BigFix product suite. It is unique in this market in that it does everything at the endpoint (desktop). Once the BigFix platform is installed, you use it to deploy DLP agents, set up policies and deploy them across the enterprise.
We found that setting up DLP was easy. We had set up the BigFix platform in the past and everything went in smoothly and worked exactly as we expected. But when we began setting up policies we were concerned about the complexity of the policy creation process in general. Building data leakage policies requires an intimate understanding of the data flowing on the enterprise, and that can be a big requirement on a large system.
Documentation is a bit thin but, nonetheless, complete. The single deployment guide answered all of our questions. Since you need the BigFix platform installed to use DLP, you also will have the core documentation for that as well.
The DLP policy wizard makes setting up policies and ascribing actions to violations a snap. DLP recognises more than 300 file types, so there is a pretty good chance that whatever you are trying to protect will be protected.
Additionally, the DLP can look for specific content such as social security numbers or credit card numbers. Finally, keyword recognition policies are part of the tool's capabilities. All of these different policies have their own wizards, and there are some templates available as well.
The BigFix DLP also tracks common protocols such as HTTP and POP3, as well as webmail. The product behaved well in our analysis, and we were pleased with its overall performance. One unique capability of the DLP is its scan for sensitive information at the desktop. Once policies are created, you can run the scan wizard and identify sensitive files as defined by your policy.
BigFix has an excellent website with lots of information, documentation and a first-rate searchable knowledge base. Support is available as a standard offering at no additional cost and as a premium paid-for package.
Once you have the BigFix platform installed, DLP adds just £11 per endpoint, making it a real bargain.