Windows Symantec Data Loss Prevention Installation …

1 Symantec data loss Prevention Installation Guide forWindows Version Last updated: September 22, 2022 Symantec data loss Prevention Installation Guide for WindowsTable of ContentsAbout this updates to the Symantec data loss Prevention Installation Guide for the 9 About Installation 9 About single 10 About hosted Network Prevent Symantec data loss Prevention system 11 Symantec data loss Prevention required ASCII characters required for all Installation a three-tier Installation high-level 12 Performing a two-tier Installation high-level a single-tier Installation high-level data loss Prevention preinstallation the Oracle database user 17 About external storage for incident that servers are ready for Symantec data loss Prevention 18 Installing an Enforce for an Enforce Server the Java Runtime Environment on the Enforce 21 Installing an Enforce 21 Verifying an Enforce Server a New

2 License a solution Symantec data loss Prevention solution a solution and registering detection detection for a detection server Microsoft Rights Management file and email the Java Runtime Environment on a detection 32 Installing a detection 32 Enabling Microsoft Rights Management file 35 Enabling RMS detection for Azure-managed RMS detection for AD-managed 37 Verifying a detection server a detection 37 2 Symantec data loss Prevention Installation Guide for WindowsConfiguring certificates for secure server the sslkeytool utility and server 39 About sslkeytool command line 39 Using sslkeytool to generate new Enforce and detection server 41 Using sslkeytool to add new detection server server certificate securing communications between the Enforce Server and the orapki command line 44 Using orapki to generate the server certificate on the Oracle communication on the Enforce the server certificate on the Enforce 48 Verifying the Enforce Server database certificate 48 About securing communications between the Enforce Server and Amazon RDS for Oracle RDS Option Group with the server certificate on the Enforce 49 Setting up an SSL connection over 50 Verifying the Enforce Server-Oracle RDS database certificate 51 Installing the domain controller agent to identify users in 52 About the domain controller controller agent Installation the domain controller controller agent post- Installation 54 Exclude an IP address or IP range from event configuration settings after the domain controller 55 Uninstalling the domain controller a single-tier 57 Preparing for a single-tier the Java

3 Runtime Environment for a single-tier a single-tier a single-tier authoring migrating to a two-tier the Single Tier Symantec DLP you to Install 65 Step 1: Create the Agent Installation 2: Prepare Endpoints for the 3 Symantec data loss Prevention Installation Guide for WindowsStep 3: Install secure communications between DLP Agents and Endpoint the agent Installation 66 Agent Installation package 68 Working with endpoint 68 Identify security applications running on Endpoint Server 69 Installing the DLP Agent on 69 Steps to Install the Agent on Windows 70 Step 1: Install Agents 70 Step 2: Install Agents 3: Confirm that the Windows Agent is 4: Review the Windows Agent Installation the Elevated Command Prompt with Windows the DLP Agent for Windows 71 Installing DLP Agents for Windows 71 About agent Installation 73 Confirming that the Windows agent is 74 What gets installed for DLP Agents installed on Windows the DLP Agent for the DLP Agent Installation You 76 Steps to install the agent on macOS 1: Complete macOS Endpoint Agent Installation 76 Step 2: Install the macOS Endpoint 76 Step 3.

4 Confirm that the Agent is 76 Complete macOS Endpoint Agent Installation 76 Understanding macOS Endpoint Agent Installation to Complete Installation Office Open XML content inspection on macOS full-disk access for the endpoint security host application ( ) on macOS Full-disk Access for the DLP Agent on macOS monitoring in Google Chrome on macOS 79 Enable Monitoring in Mozilla Firefox on macOS the Symantec extension to monitor MIP classification notifications on macOS DLP Agent access to Microsoft Office 83 Install the DLP Agent for you begin the the DLP Agent for Mac 85 4 Symantec data loss Prevention Installation Guide for WindowsInstall the DLP Agent for macOS Using Deployment 85 What gets installed for DLP Agents on macOS that the macOS agent is the macOS Agent 90 About Endpoint Endpoint tools with Windows and down the agent and the watchdog services on Windows 92 Using Endpoint tools with optional maintenance 92 Shutting down the agent service on Mac 93 Inspecting the database files accessed by the 93 Viewing Extended Log 94

5 Running the Logdump on 94 Printing the Contents of Another the Device ID the Windows Device ID 96 Using the Mac Device ID 97 Generating Third-party Application Information Using the GetAppInfo Agents That Have Been Agents on Mac Agents on 99 About uninstallation uninstallation agents and uninstallation agent password language 101 About Symantec data loss Prevention language 101 About a non-English language on the Enforce Server administration 102 Using the Language Pack a language pack on a language 105 About post- Installation up your system after post- Installation security server security and SSL/TLS browser 106 About Symantec data loss Prevention and antivirus 109 5 Symantec data loss Prevention Installation Guide for WindowsSymantec data loss Prevention directory and file exclusion from antivirus 109 Oracle directory and file exclusion from antivirus firewall 110 Windows security lockdown Administrative security system events and syslog Servers and unused initial setup tasks on the Enforce 116 About updating the JRE to the latest to update the 117 Backing up the cacerts 118 Installing the 118 Updating the JRE to the latest version on the JRE using interactive the JRE using silent CA a JRE version to a previous the JRE on 120 Starting and stopping Symantec data loss Prevention the Max 121 About starting and stopping services on an Enforce Server on an Enforce Server on a detection server on a detection server on services on single-tier Windows 123 Stopping services on single-tier Windows 124 Uninstalling data loss 125 About uninstalling a

6 The Enforce Reinstallation Resources the Enforce Reinstallation Resources file on 125 About Symantec DLP Agent a DLP Agent from a Windows DLP Agents from Windows endpoints using system management 126 Removing DLP Agents from Mac endpoints using system management a DLP Agent from a Mac Symantec data loss Prevention with FIPS encryption 6 Symantec data loss Prevention Installation Guide for WindowsAbout FIPS Internet Explorer when using 129 Copyright 131 7 Symantec data loss Prevention Installation Guide for WindowsAbout this guideAbout updates to the Symantec data loss Prevention InstallationGuide for WindowsThis guide is occasionally updated as new information becomes available. You can find the latest version of the SymantecData loss Prevention Installation Guide for Windows at the Tech Docs following table provides the history of updates to this version of the 1.

7 Change history for the Symantec data loss Prevention Installation Guide for WindowsDateDescription22 September 2022 Updated the domain controller agent August 2022 Added steps for using JAMF to deploy the Mac details for meeting pre-requisites prior to deploying the Mac April 2022 Added steps for backing up and reinstating the cacerts file during the OpenJRE update September 2021 Clarified steps for running the the description for the ARPSYSTEMCOMPONENT parameter for installing DLP Agents on August 2021 Added a prerequisite to backup the keystore files (used for DLP Agent communications) prior to SymantecData loss Prevention server uninstallation steps and directed users to the Symantec data loss Prevention SystemMaintenance Guide for May 2021 Corrected version references when upgrading the JRE using silent April 2021 Corrected steps for running the Reinstallation Resources steps for using the create_package tool when installing DLP Agents on macOS a step to the Installation process that directs administrators to back up the system after completingthe Installation .

8 8 Symantec data loss Prevention Installation Guide for WindowsPlanning the installationAbout Installation tiersAbout single sign-onAbout hosted Network Prevent deploymentsAbout Symantec data loss Prevention system requirementsSymantec data loss Prevention required itemsStandard ASCII characters required for all Installation parametersPerforming a three-tier Installation high-level stepsPerforming a two-tier Installation high-level stepsPerforming a single-tier Installation high-level stepsSymantec data loss Prevention preinstallation stepsConfirming the Oracle database user permissionsAbout external storage for incident attachmentsVerifying that servers are ready for Symantec data loss Prevention installationAbout Installation tiersSymantec data loss Prevention supports three different Installation types: three-tier, two-tier, and single-tier.

9 Symantecrecommends the three-tier Installation . However, your organization might need to implement a two-tier installationdepending on available resources and organization size. Single-tier installations are recommended for branch offices,small organizations, or for testing implement the single-tier Installation , you install the database, the Enforce Server, and a detection server all onthe same computer. Typically, this Installation is implemented for testing Symantec data loss Prevention Single Server deployment is a single-tier deployment that includes the SingleTier Monitor detection server. The Single Tier Monitor is a detection server that includes the detection capabilitiesof the Network Monitor, Network Discover, Network Prevent for Email, Network Prevent for Web, and the EndpointPrevent and Endpoint Discover detection servers.

10 Each of these detection server types is associated with one ormore detection "channels." The Single Server deployment simplifies Symantec data loss Prevention administrationand reduces maintenance and hardware costs for small organizations, or for branch offices of larger enterprises thatwould benefit from on-site deployments of Symantec data loss you choose either of these types of Installation , the Symantec data loss Prevention administrator needs to beable to perform database maintenance tasks, such as database a single-tier Installation high-level stepsTwo-tierTo implement the two-tier Installation , you install the Oracle database and the Enforce Server on the same then install detection servers on separate , this Installation is implemented when an organization, or the group responsible for data loss Prevention ,does not have a separate database administration team.