Windows Symantec Data Loss Prevention Installation …

1 Symantec data loss Prevention Installation guide forWindows Version Last updated: September 22, 2022 Symantec data loss Prevention Installation guide for WindowsTable of ContentsAbout this updates to the Symantec data loss Prevention Installation guide for the 8 About Installation 8 About single 8 About hosted Network Prevent Symantec data loss Prevention system 9 Symantec data loss Prevention required ASCII characters required for all Installation a three-tier Installation high-level 10 Performing a two-tier Installation high-level a single-tier Installation high-level data loss Prevention preinstallation the Oracle database user 16

2 About external storage for incident that servers are ready for Symantec data loss Prevention 17 Installing an Enforce for an Enforce Server the Java Runtime Environment on the Enforce 19 Installing an Enforce 20 Verifying an Enforce Server a New License a solution Symantec data loss Prevention solution a solution packImporting the solution 28 Installing and registering detection detection for a detection server Microsoft Rights Management file and email the Java Runtime Environment on a detection 32 Installing a detection 32 Enabling Microsoft Rights Management file 36 Enabling RMS detection for Azure-managed a detection server a detection 37 Configuring certificates for secure server 2 Symantec data loss Prevention Installation guide for WindowsAbout the sslkeytool utility and server 40 About sslkeytool command line 40 Using sslkeytool to generate new Enforce and detection server 42 Using sslkeytool to add new detection server server certificate securing communications between the Enforce Server and the orapki command line 45 Using orapki to generate the server certificate on

3 The Oracle communication on the Enforce the server certificate on the Enforce 49 Verifying the Enforce Server database certificate 50 About securing communications between the Enforce Server and Amazon RDS for Oracle RDS Option Group with the server certificate on the Enforce 51 Setting up an SSL connection over 52 Verifying the Enforce Server-Oracle RDS database certificate 52 Installing the domain controller agent to identify users in 53 About the domain controller controller agent Installation the domain controller controller agent post- Installation 55 Exclude an IP address or IP range from event configuration settings after the domain controller 56 Uninstalling the domain controller a single-tier 58 Preparing for a single-tier the Java Runtime Environment for a single-tier a single-tier a single-tier authoring migrating to a two-tier the Single Tier Symantec DLP Symantec DLP secure communications between DLP Agents and Endpoint agent Installation Installation package 70 Working with endpoint 71 3 Symantec data loss Prevention Installation guide for

4 WindowsIdentify security applications running on Endpoint Server 71 Use the Elevated Command Prompt with Windows 72 Installing the DLP Agent on 72 Installing the DLP Agent for Windows 73 Installing DLP Agents for Windows 74 About agent Installation 75 Confirming that the Windows agent is 76 What gets installed for DLP Agents installed on Windows to install the DLP Agent on 78 Packaging Mac agent Installation 78 About optional Installation and maintenance the DLP Agent for Mac DLP Agents on Mac endpoints that the Mac agent is 81 What gets installed for DLP Agents on macOS Endpoint Endpoint tools with Windows and down the agent and the watchdog services on Windows 83 Using Endpoint tools with down the agent service on Mac 83 Inspecting the Database Files Accessed by the the Tool on Windows the vontu_sqlite3 Tool on Linux the Vontu_sqlite3 Tool on Mac Extended Log 85 Running the Logdump on 85 Printing the Contents of Another the Device ID the Windows Device ID 87 Using the Mac Device ID 88 Using the GetAppInfo 89 Starting Agents That Have Been Agents on Mac Agents on

5 90 About uninstallation uninstallation agents and uninstallation agent password language 92 4 Symantec data loss Prevention Installation guide for WindowsAbout Symantec data loss Prevention language 92 About a non-English language on the Enforce Server administration 93 Using the Language Pack a language pack on a language 96 About post- Installation post- Installation security server security and SSL/TLS browser 97 About Symantec data loss Prevention and antivirus 100 Symantec data loss Prevention directory and file exclusion from antivirus 100 Oracle directory and file exclusion from antivirus firewall 101 Windows security lockdown Administrative security system events and syslog Servers and unused initial setup tasks on the Enforce 107 About updating the JRE to the latest to update the 108 Backing up the cacerts 109 Installing the 109 Updating the JRE to the latest version on the JRE using interactive the JRE using silent CA a JRE version to a previous the JRE on 111 Starting and stopping Symantec data loss Prevention the Max 112 About starting and

6 Stopping services on an Enforce Server on an Enforce Server on a detection server on a detection server on services on single-tier Windows 114 5 Symantec data loss Prevention Installation guide for WindowsStopping services on single-tier Windows 114 Uninstalling Symantec data loss 115 About uninstalling a the Enforce Reinstallation Resources the Enforce Reinstallation Resources file on 115 Uninstalling a server from a Windows Symantec DLP Agent a DLP Agent from a Windows DLP Agents from Windows endpoints using system management 117 Removing DLP Agents from Mac endpoints using system management a DLP Agent from a Mac 118 Copyright A: Installing Symantec data loss Prevention with FIPS encryption 121 About FIPS Internet Explorer when using 121 6 Symantec data loss Prevention Installation guide for WindowsAbout this guideAbout updates to the Symantec data loss Prevention InstallationGuide for WindowsThis guide is occasionally updated as new information becomes available.

7 You can find the latest version of the SymantecData loss Prevention Installation guide for Windows at the Tech Docs to the article at the Support center to be notified when there are following table provides the history of updates to this version of the Symantec data loss Prevention Installation Guidefor 1: Change history for the Symantec data loss Prevention Installation guide for WindowsDateDescription22 September 2022 Updated the domain controller agent April 2022 Added steps for uninstalling specific versions of Symantec data loss Prevention components from April 2022 Added steps for backing up and reinstating the cacerts file during the OpenJRE update September 2021 Clarified steps for running the August 2021 Removed server uninstallation steps and directed users to the Symantec data loss Prevention SystemMaintenance guide for April 2021 Corrected steps for

8 Running the Reinstallation Resources March 2021 Added steps for installing the location where the JRE Installation file is September 2020 Indicated the /tmp/MacInstaller is the required location from where the create_package should berun on macOS and February 2020 Added steps for securing communications between the Enforce Server and Amazon RDS for Oracle. Thesteps include details on using the new rds-ca-2019-root certificate. 7 Symantec data loss Prevention Installation guide for WindowsPlanning the installationAbout Installation tiersSymantec data loss Prevention supports three different Installation types: three-tier, two-tier, and single-tier.

9 Symantecrecommends the three-tier Installation . However, your organization might need to implement a two-tier installationdepending on available resources and organization size. Single-tier installations are recommended for branch offices,small organizations, or for testing implement the single-tier Installation , you install the database, the Enforce Server, and a detection server all onthe same computer. Typically, this Installation is implemented for testing Symantec data loss Prevention Single Server deployment is a single-tier deployment that includes the SingleTier Monitor detection server.

10 The Single Tier Monitor is a detection server that includes the detection capabilitiesof the Network Monitor, Network Discover, Network Prevent for Email, Network Prevent for Web, and the EndpointPrevent and Endpoint Discover detection servers. Ea