Microsoft Purview Data Loss Prevention vs. Symantec Data Loss Prevention

Microsoft Purview Data Loss Prevention is ideal for a 365 E5 enterprise organization where Azure directory is your 'source of truth' for user management and security policies. It is suited for using OneDrive as personal file management and SharePoint as collaborative files storage. Allows delineation of scanning various assets based on job function and department (as defined by Azure groups etc.). No additional cost if you are already invested in an E5 enterprise environment (for most functions, MS has additional DLP product enhancements)

Incentivized

Email, web browser, and data storage areas will fulfill the security of mobile devices very well. It provides multiple methods of data filtering and classification to ensure important data can be well protected. Unfortunately, it does not support you to make regex-based definitions. for this reason, you need to work on the rules a lot. Another disadvantage is that it cannot monitor Linux systems.

Incentivized

• Adaptive Protection is one of the coolest capabilities in Microsoft Purview Data Loss Prevention especially from the aspect of DLP. Over time, it starts analyzing risky documents and/or contents in the M365 (or O365) environment and starts securing them automatically based on the current available settings.
• The wide variety of options while creating policies helps in covering number of different scenarios and thus offers more secure and broader coverage of content.
• Activity explorer (specifically Analytics) provides a very helpful and informative bird's eye view of all the activities happening around while ensuring a provision of being notified in real time about any suspicious activity.

Incentivized

• Protection against Data Leakage via the USB channel on endpoints.
• Protection against Data Leakage via email channel on endpoints
• Protection against Data Leakage over the Web channel on endpoints.
• Flexible and configurable for various types of content inspection.

Incentivized

• The Data Loss Prevention tools don't seem to integrate well with other DLP tools Microsoft provides, like those built into Exchange Online. Data is missed when it should be blocked from being sent.
• The way Purview contributes to the overall Microsoft Security Score can be a bit difficult to tell, it's not clear what is being applied to improve the score and other management windows need to be accessed to address suggestions.

Incentivized

• Policy tweaking and customizations can be very complex and take a lot of effort and time.
• API integration is difficult and requires specialized support. Finding an experienced professional can be difficult.

Incentivized

Microsoft Purview Data Loss Prevention is super difficult.

Incentivized

Symantec DLP works good for our very simple and low complexity use cases and I would highly recommend it for them. However, I can't speak to highly complex or advanced use cases that might arise in certain industries like finance. I would recommend that if you are seeking an Enterprise DLP solution that you absolutely must explore this product as one of the leaders in the space - not doing so would be negligent in my opinion.

Incentivized

Not used any product other than Microsoft Purview Data Loss Prevention. As I mentioned in my earlier point that we did all the researches for the best suitable product for our environment, but Microsoft Purview Data Loss Prevention proved to be best and is working as per our expectations. So we never had to think about any other product.

Incentivized

Symantec DLP is the best. Put it in a head to head competition and it will win. However it can be a bit more expensive than other products so don't compare on price, compare on quality of product.

• Allows us to be in compliance with a number of DoD contract obligations without resorting to 3rd party data access or additional product purchases.
• Policy deployment from policy templates is relatively easy and quick. Allows a small 3 person IT team to deploy DLP policies and changes quickly.
• Single pane of glass dashboard and policy monitoring make administration straight fowled

Incentivized

• Found data that should have been protected or moved to a different location
• Helped us understand what type of data is leaving the environment