Microsoft Office365 integration with Symantec DLP 14.5

[Judy Xavier]

Hi Team,

We want to integrate Symantec DLP with Microsoft Office 365 on cloud. Can we achieve this using our existing Network Prevent for Email detection server and license. We are planning to create VM in cloud, where we will install Network Prevent for Email detection server. We will make a IP sec tunnel from Network Prevent for Email sitting on cloud to our on-prem Enforce Server. Also we will configure connectors in Microsoft Office 365 to route inbound and outbound traffic from Network Prevent for Email detection server (on cloud) to Microsoft office 365 to achieve reflect mode.
In the above scenario will our existing license work since currently we have license for Network Monitor, Endpoint Prevent, Endpoint Discover, Network Prevent for Email, Network Prevent for Web? Is the above scenario doable? If the above is doable then are there any DLP Version dependencies?
Below are our Symantec DLP version details. Please let us know if any more details are required.

Symantec DLP Version: 14.5
Oracle Database Version: 11g

Regards,
Judy

------------------------------
Consultant
CRISIL
------------------------------

[Paul Evans]

Hi Judy,

Before you do anything you need to upgrade to a supported version.  I would upgrade to 15.7 and Oracle 19c before you consider doing this.  Then I would review the cloud implementation guides found here.

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/15-7/Related-Documents.html

The system requirements talks about what detection servers are supported and on what cloud platform.  I would then review the two cloud guides.  They don't particularly address the reflect mode but I see no reason why you can't do it when you configure the email prevent server.  As far as licenses, they do mention in the cloud guide that you need a cloud license.  I can't say for sure on that.  I would reach out to your sales representative and verify if your current licenses are entitled for that configuration.

I hope that helps.

Paul 

.

[Judy Xavier]

Hi Paul,

Thank you for your valuable information. Is Symantec DLP 14.5 version supported for deployment of Network Prevent of Email in cloud (azure)?

Regards,
Judy

------------------------------
Consultant
CRISIL
------------------------------

[Judy Xavier]

Hi Paul, 

Also please can you let me know if we can integrate Symantec DLP with Azure Active directory(cloud only). 

Regards,
Judy

------------------------------
Consultant
CRISIL
------------------------------

[Judy Xavier]

Hi Paul,

Any update?

Regards,
Judy

------------------------------
Consultant
CRISIL
------------------------------

[Paul Evans]

It would not be supported.  Updating to 15.7 would be your best option and then you can do it.  Once you get there as long as you can connect to your AD server on port 389 or 636 then you can connect to AD.

I hope that helps.

Paul 

.