Implementation Opportunities and Prevention Mechanisms
Forcepoint Solution Considerations and Policy Recommendations
DLP Functional Comparison (Gateway-based vs. Endpoint-based)
| Feature Comparison | Gateway-based | Endpoint-based |
|---|---|---|
| 1. HTTP Leakage Blocking | O | O |
| 2. HTTPS Leakage Blocking | Requires SSL Decryption (Forcepoint Proxy) | O |
| 3. SMTP Leakage Blocking | O | O |
| 4. Offline User Leakage Blocking | X | O |
| 5. USB Device Leakage Blocking | X | O |
| 6. Optical Drive/Burner Leakage Blocking | X | O |
| 7. 5G Network Leakage Blocking | X | O |
| 8. Printer Leakage Blocking | X | O |
| 9. Architecture | Web: Sniffer Mode/Proxy Mode Mail: MTA Mode |
Agent-based |
| 10. Boundary Mail Review and Release | O (Forcepoint Exclusive Feature) | X |
| 11. Web Upload Image OCR Recognition | O (Forcepoint Exclusive Feature) | X |
| 12. Outgoing Email Image Attachment OCR Recognition | O (Forcepoint Exclusive Feature) | X |
| 13. Drip DLP Detection (Low-volume/Cumulative leakage detection) | O (Forcepoint Exclusive Feature) | O |
| 14. Integration with Third-party Email Encryption Systems | O | X |
| 15. Automatic File Encryption when Copying to USB | X | O (Forcepoint Exclusive Feature) |
| 16. Keyword Matching Defense | O | O |
| 17. Filetype Matching Defense | O | O |
| 18. Policy Template Matching Defense | O | O |
| 19. File Fingerprinting Defense | O | O |
| 20. Database Fingerprinting Defense | O | O |