BitLocker Drive Encryption vs. Symantec Data Loss Prevention

It is well suited especially for users that access or store sensitive/confidential data on their computers. In the case of where users are accessing confidential data over the network, it is highly recommended to use Bitlocker to encrypt the computer. In the case where users are storing confidential data on their computer, it should be a requirement that BitLocker is used/enabled. It would be less appropriate if someone was using a computer and they were not dealing with any sensitive data, or in cases where the computer is used for recreational purposes (browsing the web, playing games, etc).

Incentivized

Email, web browser, and data storage areas will fulfill the security of mobile devices very well. It provides multiple methods of data filtering and classification to ensure important data can be well protected. Unfortunately, it does not support you to make regex-based definitions. for this reason, you need to work on the rules a lot. Another disadvantage is that it cannot monitor Linux systems.

Incentivized

• Encrypts the entire drive and provides a high level of security.
• In an Active Directory environment, you can set up BitLocker to automatically save keys to AD.
• As part of Windows, no additional licensing costs.
• Set up and configuration is relatively easy.
• Uses TPM module to increase security.

Incentivized

• Protection against Data Leakage via the USB channel on endpoints.
• Protection against Data Leakage via email channel on endpoints
• Protection against Data Leakage over the Web channel on endpoints.
• Flexible and configurable for various types of content inspection.

Incentivized

• Encryption is not resumed after being suspended sometimes
• Sometimes it take a long time to encrypt a disk
• Encrypting secondary drives can be tricky

Incentivized

• Policy tweaking and customizations can be very complex and take a lot of effort and time.
• API integration is difficult and requires specialized support. Finding an experienced professional can be difficult.

Incentivized

I give it a nine because encryption always leaves room for improvement, and it must change as security threats evolve and improve, and having an ever-evolving system is essential.

Incentivized

Symantec DLP works good for our very simple and low complexity use cases and I would highly recommend it for them. However, I can't speak to highly complex or advanced use cases that might arise in certain industries like finance. I would recommend that if you are seeking an Enterprise DLP solution that you absolutely must explore this product as one of the leaders in the space - not doing so would be negligent in my opinion.

Incentivized

BitLocker Drive Encryption solution offering is cheaper than the one that McAfee offers, it will help you with specific business concerns like "how many encrypted assets do I have?" it's easy to maintain, easy to deploy, and easy to track. It's best suited for companies that are not trying to go far away on the disk encryption matter

Incentivized

Symantec DLP is the best. Put it in a head to head competition and it will win. However it can be a bit more expensive than other products so don't compare on price, compare on quality of product.

• It allowed us to move to whole drive encryption without much effort
• Integrated in Windows Enterprise, so free
• With the right recovery key, it is really easy for IT to recover the data, backup or reset the user's password.

Incentivized

• Found data that should have been protected or moved to a different location
• Helped us understand what type of data is leaving the environment