Microsoft Purview Data Loss Prevention vs. Symantec Data Loss Prevention

I would highly recommend Microsoft Purview Data Loss Prevention for companies that are utilizing Microsoft technologies based on the strong integrations. If a company is using other technologies (e.g Google Workspace), then Microsoft Purview Data Loss Prevention would not be a good fit and would be difficult to implement/manage.

Incentivized

Email, web browser, and data storage areas will fulfill the security of mobile devices very well. It provides multiple methods of data filtering and classification to ensure important data can be well protected. Unfortunately, it does not support you to make regex-based definitions. for this reason, you need to work on the rules a lot. Another disadvantage is that it cannot monitor Linux systems.

Incentivized

• Automatic labeling, once we've trained the naming conventions and things like that and we get the labels placed on things. One of the biggest problems that our clients face is the fact that they don't particularly know every single time exactly the data that they're trying to protect, how to identify it when it comes into the system or when they create it, right? So we're using Purview and we're using the abilities that Purview has to auto-label things based off of either taxonomy that you have produced or created or that have been automatically populated through AI. That makes it a lot easier and kind of thwarts possible user error that causes problems for organizations.

Incentivized

• Protection against Data Leakage via the USB channel on endpoints.
• Protection against Data Leakage via email channel on endpoints
• Protection against Data Leakage over the Web channel on endpoints.
• Flexible and configurable for various types of content inspection.

Incentivized

• Overall, Microsoft DLP is not my number one choice because there's not much flexibility. There's a lot of restrictions and the way they set up rules a lot really restrictive. Thus it takes a lot more time for my team to build the rules and establish the controls as needed. So it's very clunky in that way and they have not improved it over the years, but I know they're trying to get a better, however it takes time because Microsoft, as we all knows, not a really security centric company.

Incentivized

• Policy tweaking and customizations can be very complex and take a lot of effort and time.
• API integration is difficult and requires specialized support. Finding an experienced professional can be difficult.

Incentivized

Microsoft Purview Data Loss Prevention is super difficult.

Incentivized

Symantec DLP works good for our very simple and low complexity use cases and I would highly recommend it for them. However, I can't speak to highly complex or advanced use cases that might arise in certain industries like finance. I would recommend that if you are seeking an Enterprise DLP solution that you absolutely must explore this product as one of the leaders in the space - not doing so would be negligent in my opinion.

Incentivized

There are much more comprehensive and granular DLP solutions out there like Trellix and Sophos but ultimately they are expensive and require significant administrative oversight for implementation and deployment. For a company of our size, they are just not economically feasible. We purchased out 365 E5 tenant with Purview DLP integration from a reseller at a price that we couldn't compete with vs a standalone enterprise product.

Incentivized

Symantec DLP is the best. Put it in a head to head competition and it will win. However it can be a bit more expensive than other products so don't compare on price, compare on quality of product.

• It has helped us to prevent data breaches and protect them from data loss.
• It has strong visibility on the activities related to data copy to and from removable devices.
• It can easily enforce the policies on group of users and also exclude some in the exclusions

Incentivized

• Found data that should have been protected or moved to a different location
• Helped us understand what type of data is leaving the environment