Dlptest.com Website Review

DLPTest.com is a Data Loss Prevention (DLP) testing resource that focuses on testing to make sure your DLP software is working correctly. If DLP has been installed correctly and the DLP policies have been built correctly, this website can be used to demonstrate your data is being protected. Data Loss Prevention is typically broken into three vectors called Data-In-Use (DIU), Data-At-Rest (DAR), and Data-In-Motion (DIM). DLPTest.com currently has features to test Data-In-Use and Data-In-Motion. Data-In-Use also known as Endpoint Protection requires installing an Endpoint Agent on the user computers. The Endpoint Agents should be installed on laptops, desktops, and virtual desktops such has Citrix VDI. Once the Endpoint Agent has been installed the DLP software can web browsers (IE, Chrome, Firefox), FTP transfers, and cloud storage as supported channels for monitoring. Data-In-Motion is the ability to monitor traffic on the network including but not limited HTTP, HTTPS, FTP, and SMTP. Data-In-Motion is typically broken into 3 different modules in order to integrate with different parts of the network. The simplest module is the Network Monitor which most vendors require a physical server due to limitation with virtual network cards and the Network Monitor monitors traffic using a SPAN port or Network Tap. The major limitation with Network Monitor is that it can only look at unencrypted traffic so it is unable to view HTTPS and SMTP over TLS. Most security vendors state that 60% to 80% of all enterprise network traffic is encrypted at this point. In order to gain insight with encrypted traffic there are the Email Prevent and Web Prevent modules. Email Prevent should sit in line in between the email router (Exchange) and the edge MTA (Email Gateway) to monitor outbound email traffic. Web Prevent is used to integrate with a Web Proxy using the ICAP protocol to monitor HTTP, HTTPS, and FTP traffic. Some vendors offer Web Prevent built into