Windows Symantec Data Loss Prevention Installation …

1 Symantec data loss Prevention Installation guide forWindows Version Last updated: September 22, 2022 Symantec data loss Prevention Installation guide for WindowsTable of ContentsAbout this updates to the Symantec data loss Prevention Installation guide for the 8 About Installation 8 About single 8 About hosted Network Prevent Symantec data loss Prevention system 9 Symantec data loss Prevention required ASCII characters required for all Installation a three-tier Installation high-level 10 Performing a two-tier Installation high-level a single-tier Installation high-level data loss Prevention preinstallation the Oracle database user 16 About external storage for incident that servers are ready for Symantec data loss Prevention 17 Installing an Enforce for an Enforce Server the Java Runtime Environment on the Enforce 19 Installing an Enforce 20 Verifying an Enforce Server a New License a solution Symantec data loss Prevention solution

2 A solution packImporting the solution 28 Installing and registering detection detection for a detection server Microsoft Rights Management file and email the Java Runtime Environment on a detection 32 Installing a detection 32 Enabling Microsoft Rights Management file 36 Enabling RMS detection for Azure-managed a detection server a detection 37 Configuring certificates for secure server 2 Symantec data loss Prevention Installation guide for WindowsAbout the sslkeytool utility and server 40 About sslkeytool command line 40 Using sslkeytool to generate new Enforce and detection server 42 Using sslkeytool to add new detection server server certificate securing communications between the Enforce Server and the orapki command line 45 Using orapki to generate the server certificate on the Oracle communication on the Enforce the server certificate on the Enforce 49 Verifying the Enforce Server database certificate 50 About securing communications between the Enforce Server and Amazon RDS for Oracle RDS Option Group with the server certificate on the Enforce 51 Setting up an SSL connection over 52 Verifying the Enforce Server-Oracle RDS database certificate 52 Installing the domain controller agent to identify users in 53 About the domain controller controller agent Installation the domain controller controller agent post- Installation 55 Exclude an IP address or IP range from event configuration settings after the domain controller 56 Uninstalling the domain controller a single-tier 58 Preparing for a single-tier the Java Runtime Environment for a single-tier a single-tier a single-tier authoring migrating to a two-tier the Single Tier Symantec DLP Symantec DLP secure communications

3 Between DLP Agents and Endpoint agent Installation Installation package 70 Working with endpoint 71 3 Symantec data loss Prevention Installation guide for WindowsIdentify security applications running on Endpoint Server 71 Use the Elevated Command Prompt with Windows 72 Installing the DLP Agent on 72 Installing the DLP Agent for Windows 73 Installing DLP Agents for Windows 74 About agent Installation 75 Confirming that the Windows agent is 76 What gets installed for DLP Agents installed on Windows to install the DLP Agent on 78 Packaging Mac agent Installation 78 About optional Installation and maintenance the DLP Agent for Mac DLP Agents on Mac endpoints that the Mac agent is 81 What gets installed for DLP Agents on macOS Endpoint Endpoint tools with Windows and down the agent and the watchdog services on Windows 83 Using Endpoint tools with down the agent service on Mac 83 Inspecting the Database Files Accessed by the the Tool on Windows the vontu_sqlite3 Tool on Linux the Vontu_sqlite3 Tool on Mac Extended Log 85 Running the Logdump on 85 Printing the Contents of Another the Device ID the Windows Device ID 87 Using the Mac Device ID 88 Using the GetAppInfo 89 Starting Agents That Have Been Agents on Mac Agents on 90 About uninstallation uninstallation agents and uninstallation agent password language 92 4 Symantec data loss Prevention Installation guide for WindowsAbout Symantec data loss Prevention language 92 About a non-English language on the Enforce Server administration 93 Using the Language Pack a language pack on a language 96 About post- Installation post- Installation security server security and SSL/TLS browser 97 About Symantec data loss

4 Prevention and antivirus 100 Symantec data loss Prevention directory and file exclusion from antivirus 100 Oracle directory and file exclusion from antivirus firewall 101 Windows security lockdown Administrative security system events and syslog Servers and unused initial setup tasks on the Enforce 107 About updating the JRE to the latest to update the 108 Backing up the cacerts 109 Installing the 109 Updating the JRE to the latest version on the JRE using interactive the JRE using silent CA a JRE version to a previous the JRE on 111 Starting and stopping Symantec data loss Prevention the Max 112 About starting and stopping services on an Enforce Server on an Enforce Server on a detection server on a detection server on services on single-tier Windows 114 5 Symantec data loss Prevention Installation guide for WindowsStopping services on single-tier Windows 114 Uninstalling Symantec data loss 115 About uninstalling a the Enforce Reinstallation Resources the Enforce Reinstallation Resources file on 115 Uninstalling a server from a Windows Symantec DLP Agent a DLP Agent from a Windows DLP Agents from Windows endpoints using system management 117 Removing DLP Agents from Mac endpoints using system management a DLP Agent from a Mac 118 Copyright A: Installing Symantec data loss Prevention with FIPS encryption 121 About FIPS Internet Explorer when using 121 6 Symantec data loss Prevention Installation guide for WindowsAbout this guideAbout updates to the Symantec data loss Prevention InstallationGuide for WindowsThis guide is occasionally updated as new information becomes available.

5 You can find the latest version of the SymantecData loss Prevention Installation guide for Windows at the Tech Docs to the article at the Support Center to be notified when there are following table provides the history of updates to this version of the Symantec data loss Prevention Installation Guidefor 1: Change history for the Symantec data loss Prevention Installation guide for WindowsDateDescription22 September 2022 Updated the domain controller agent April 2022 Added steps for uninstalling specific versions of Symantec data loss Prevention components from April 2022 Added steps for backing up and reinstating the cacerts file during the OpenJRE update September 2021 Clarified steps for running the August 2021 Removed server uninstallation steps and directed users to the Symantec data loss Prevention SystemMaintenance guide for April 2021 Corrected steps for running the Reinstallation Resources March 2021 Added steps for installing the location where the JRE Installation file is September 2020 Indicated the /tmp/MacInstaller is the required location from where the create_package should berun on macOS and February 2020 Added steps for securing communications between

6 The Enforce Server and Amazon RDS for Oracle. Thesteps include details on using the new rds-ca-2019-root certificate. 7 Symantec data loss Prevention Installation guide for WindowsPlanning the installationAbout Installation tiersSymantec data loss Prevention supports three different Installation types: three-tier, two-tier, and single-tier. Symantecrecommends the three-tier Installation . However, your organization might need to implement a two-tier installationdepending on available resources and organization size. Single-tier installations are recommended for branch offices,small organizations, or for testing implement the single-tier Installation , you install the database, the Enforce Server, and a detection server all onthe same computer. Typically, this Installation is implemented for testing Symantec data loss Prevention Single Server deployment is a single-tier deployment that includes the SingleTier Monitor detection server.

7 The Single Tier Monitor is a detection server that includes the detection capabilitiesof the Network Monitor, Network Discover, Network Prevent for Email, Network Prevent for Web, and the EndpointPrevent and Endpoint Discover detection servers. Each of these detection server types is associated with one ormore detection "channels." The Single Server deployment simplifies Symantec data loss Prevention administrationand reduces maintenance and hardware costs for small organizations, or for branch offices of larger enterprises thatwould benefit from on-site deployments of Symantec data loss you choose either of these types of Installation , the Symantec data loss Prevention administrator needs to beable to perform database maintenance tasks, such as database a single-tier Installation high-level stepsTwo-tierTo implement the two-tier Installation , you install the Oracle database and the Enforce Server on the same then install detection servers on separate , this Installation is implemented when an organization, or the group responsible for data loss Prevention ,does not have a separate database administration team.

8 If you choose this type of Installation , the Symantec DataLoss Prevention administrator needs to be able to perform database maintenance tasks, such as database a two-tier Installation high-level stepsThree-tierTo implement the three-tier Installation , you install the Oracle database, the Enforce Server, and a detection serveron separate computers. Symantec recommends implementing the three-tier Installation architecture as it enablesyour database administration team to control the database. In this way you can use all of your corporate standardtools for database backup, recovery, monitoring, performance, and maintenance. Three-tier installations requirethat you install the Oracle Client (SQL*Plus and Database Utilities) on the Enforce Server to communicate with theOracle a three-tier Installation high-level stepsAbout single sign-onSymantec data loss Prevention provides several options for authenticating users and signing users on to the EnforceServer administration console.

9 The Symantec data loss Prevention Installation program helps you configure several ofthese options when you install the Enforce Server. These Installation options include: Password authentication with forms-based is the default method of authenticating users to the Enforce Server administration console. When using passwordauthentication, users sign on to the Enforce Server administration console by accessing the sign-on page in theirbrowser and entering their user name and password. You can enable password authentication in addition to certificateauthentication. Certificate data loss Prevention supports single sign-on using client certificate authentication. With certificateauthentication, a user interacts with a separate public key infrastructure (PKI) to generate a client certificate thatSymantec data loss Prevention supports for authentication. When a user accesses the Enforce Server administrationconsole, the PKI automatically delivers the user's certificate to the Enforce Server computer for authentication and 8 Symantec data loss Prevention Installation guide for Windowssign-on.

10 If you choose certificate authentication, the Installation program gives you the option to enable passwordauthentication as you want to enable certificate authentication, first verify that your client certificates are compatible with Symantec DataLoss Prevention . See the Symantec data loss Prevention System Requirements and Compatibility guide . Certificateauthentication also requires that you install the certificate authority (CA) certificates that are necessary to validate clientcertificates in your system. These certificates must be available in .cer files on the Enforce Server computer. During theSymantec data loss Prevention Installation , you can import these CA certificates if you want to use password authentication, no additional information is required during the Symantec data LossPrevention About authenticating users in the Symantec data loss Prevention Help Center for more information about all of theauthentication and sign-on mechanisms that Symantec data loss Prevention the Symantec data loss Prevention Help Center for information about configuring certificate authentication after youinstall Symantec data loss hosted Network Prevent deploymentsSymantec data loss Prevention supports deploying one or more Network Prevent detection servers in a hosted serviceprovider network, or in a network location that requires communication across a Wide Area Network (WAN).