Hi Greg.
The CloudSOC implementation of "
Cloud Managed DLP" is a method for DLP content inspection that does not require an on-premises Enforce Server - all policy authoring and incident reporting is done via the CloudSOC console.
Currently, Cloud Managed DLP supports integration with the DLP Cloud Detection Service for CASB. It is expected that a future update will include management in the CloudSOC of both the Cloud Detection Service for WSS (ICAP) and for the Cloud Service for Email.
Just to be clear - while "DLP Core" is all on-premises DLP solution/SKU,
most implementations of the DLP Cloud Package SKU also utilize an on-premises Enforce Server.Thus, if those SKU features for WSS and Email Cloud Services are required now, the DLP Cloud implementation does require customers to install an Enforce Server and its database for policy and incident management.
Hopefully this is helpful - many thanks!