Microsoft Purview Data Loss Prevention is used to provide intelligent detection and control of sensitive information across Office 365, OneDrive, SharePoint, Microsoft Teams, and on the endpoint. It also helps prevent data loss through identifying and preventing risky or inappropriate sharing, transfer, or use of sensitive data on endpoints, apps, and services.
N/A
Zscaler Data Security
Score 8.3 out of 10
N/A
Zscaler Data Security is a cloud-delivered platform built to safeguard an organization's sensitive data. It locates sensitive data, understands its risk exposure, and secures sensitive data across the web, email, workloads, private apps, and BYOD endpoints.
It's well-suited if you're really deep in the tech stack. If you're an exchange organization that's using the O365 suite, that's in Entra, that's in Azure, it's really great visibility. I think it probably falls apart very quickly if you don't have data from all those planes to feed it.
Great for network DLP, web, and endpoint monitoring. DSPM data discovery works well for key structured and unstructured data sources. An area for improvement is simplifying the interface into a single pane for reviewing incidents and making it part of the tooling, rather than a separate module with a fee (incident receiver).
I think from a coverage standpoint, it's pretty comprehensive. The areas it covers, of course, include the Microsoft stack, but also focus on using the definitive cloud apps integration to extend visibility and control to third-party cloud apps, endpoints, and even Macs. So those are capabilities.
Its comprehensiveness, its simplicity of creating the policies in one place, are definitely one of the plus points the solution has.
The main thing is that, within the product's story, some functionalities were deprecated, and traceability was one of them. That meant that before I could tell or pinpoint on a world map where a particular type of access attempt was happening, and now I cannot do that anymore. So that was useful because I could understand how far out a document made it, and then where the issue was. Was an employee trying to open it at home, or was it an external party altogether? I couldn't do that anymore.
The second bit that has room for improvement, is the fact that we have quite a lot of legacy documents that were labeled. So they are from previous versions of Office. And at the moment, since November last year, the already labeled documents are not being protected by the labels.
The DLP dictionary functions need to be expanded upon, such as matching all regex patterns with any phrases and vice versa. The only way to do this today is to create two dictionaries and then use an engine to combine them; however, this approach loses the ability to utilize proximity.
I think it is very easy for the end user once it's applied. On the configuration side, there's a learning curve to that, but there's always a learning curve for anything. So I think the product does what it needs to do. It is easy enough to use.
Zscaler Data Protection is a complete solution for protecting your valuable data. No matter whether the data resides at your on-prem, cloud, or any workload or at the data center, Zscaler has a foolproof mechanism to protect it at any cost with zero tolerance. Also, Zscaler Data Protection has a perfect UI for deploying, managing, and maintaining our different kinds of environments. (e.g., On-Prem or Hybrid).
Symantec or now? Brocom. Forcepoint, GPV. I'm trying to think of, there's a couple more. I can't think of the top of my head. I would say closer to the bottom then rather than the top. So because of the fact that yes, it integrates well. But in terms of the actual functionality of DLP, there are other requirements that they just don't have the features for yet.
Thought about deploying zero trust cloud within our environment, but we are still in the early stages of our digital transformation projects. Still evaluating current options, but we knew Zscaler Data Security took a strict approach to data, so that's what we wanted to evaluate.
From an ROI perspective, being able to have a robust DLP capability within 365 and with eShare, again, providing the defensive depth and keeping data 365 gives both us as well as our customers an ROI by being able to not use third party repositories to share data externally and by keeping data inside of 365. It gives me much more visibility into my data landscape. One of the things we advise our customers to do when they're starting to explore the advanced capabilities of Microsoft Purview Data Loss Prevention, for example, is to use that DLP product to monitor and understand the flows of sensitive data within the organization. By being able to look at that DLP, identify those sensitive niche types, and see which transactions occur internally within the organization, I get a clearer picture of what I'm doing.
