EMEA Data Loss Prevention User Group

Dear all,
thank you for attending the EMEA DLP User Group event! I would like to extend a special thanks to the entire Credit Suisse Team for being such an excellent host!
Below you will find a summary of the meeting.
Presentations will be uploaded to Community site, where we have received ok to do so. (will be done by Friday)

We hope to see you at the next meeting!

Summary Feedback Forms

 (*) Form of event /length /content of presentations, agenda, time for networking etc.: overall ok, someone said too shorten afternoon session /
(*) Topics they would like to see in next meetings –ranked by priority:

DLP (12) /Endpoint Security(3)/ Security Management (2)/IT Compliance (2)/ Web Security (1)/ Messaging Security (1)/

(*) Additional comments:

- would like to see Feature Request session again

- Please avoid talking in acronyms.

- More business related topics  

- Too IT specific , focus maybe more on end user problems, discuss ideas

- More user/company experiences

- Incident Management, hear more details about functionalities

Prize Draw/Connect Points - Winners have been notified - payout of points should arrive within next 10 working days

Next meeting:

• Locations: If you are willing to host the next DLP user group simply get in contact with me. (Symantec will cover the costs for catering)
• If you have additional feedback or suggestions for future user groups (areas for improvement, additional topic ideas, etc.) – please get in contact with me.

Notes & Action items:

• Workplace Monitoring Whitepaer: http://www.symantec.com/connect/sites/default/files/21263455_EMEA_WP_DLP_Monitoring_workplace_09_12.pdf
• Data Breach study:http://www.symantec.com/about/news/resources/press_kits/detail.jsp?pkid=ponemon-2013
• (PM) Feedback on how DLP plans to monitor IM traffic, especially Lync. Monitoring for internal and external communications for chat and file transfer.
• (Marketing) Post information about IT Analytics to Symantec connect group, can ITA be integrated in EV and CCS? What other components can IT Analytics integrate with? Answer: No integration in CCS today, EV integration through EV reporting interface.
• (PM) Feedback: It is complicated for large companies to perform database schema changes as part of a product update. Symantec should look in providing an easier way for Software updates of DLP
• (PM) Question to be answered on connect group: How can DLP detect if a file is encrypted? Which encryption formats can be recognized?
• (SYMC) Feedback: Customers still have issues deploying DLP in Germany and France due to legal issues. Symantec could provide more information and best practices on how this can be achieved.
• (PM) There are a lot of good KB articles in the DLP KB that help to setup EDM correctly and effectively. However the customers look for a technote / whitepaper to summarize all this information as its very complicated to get all information from those several KB articles and combine them. SYMC should release an “EDM best practices whitepaper”
• (SYMC) the EDM pre-indexer is a very good bullet against competitors. SYMC should invest further in the EDM pre-indexer to not lose this advantage.
• (PM) Customers look for a KB entry on how encrypted ZIP files can be detected, especially if the ZIP file is split across multiple files and only some files are encrypted in the ZIP file
• (PM) customer would find it useful if words in the incidents could be highlighted.
• (PM) I am not sure if we (beside support) should look into this: “impossible components”, since this was an error messaged three customers received.
• (PM) Customers asked for a more efficient upgrade process
• (PM) Customers like to use their own content in the notifications
• (PM) There was also a comment about the naming of the false positive because of legal issues.