Microsoft Previews Endpoint Data Loss Prevention Service -- Redmondmag.com

Microsoft Previews Endpoint Data Loss Prevention Service

By Kurt Mackie
07/22/2020

Microsoft announced on Tuesday that a preview of its new Endpoint Data Loss Prevention (DLP) service is getting distributed to Microsoft 365 E5/A5 subscribers.

Endpoint DLP is coming to tenancies having "Microsoft 365 E5/A5, Microsoft 365 E5/A5 Compliance, and Microsoft 365 E5/A5 Information Protection and Governance" subscriptions. The exact timing wasn't described.

Endpoint DLP is yet another Microsoft Information Protection scheme, in this case offering protection for data on devices when end users take certain actions. Microsoft Information Protection is built into various Microsoft software products, aimed at preventing the exposure of data outside an organization. Microsoft has created detections for more than 100 data types deemed to be "sensitive," and includes more than 40 templates to address regulations.

Microsoft explained that "Endpoint DLP is native to Windows 10 and the new Microsoft Edge browser." The benefit of this built-in aspect is that there's no additional software to install.

In a separate announcement about the Microsoft Edge browser, Microsoft claimed that "Microsoft Edge is the only browser that natively supports Microsoft Endpoint DLP and eliminates the need to install, maintain and upgrade additional data loss prevention software for the browser." Microsoft further claimed that Edge has strong phishing and malware protections, automatic profile switching within the browser for work and home uses, and an improved Collections feature for gathering site contents, among other improvements. Edge also will be getting FastTrack partner support next month, Microsoft indicated.

Microsoft Information Protection already has support for preventing data leakage across Microsoft 365 applications and "third-party SaaS applications," Microsoft's announcement explained. With the new Endpoint DLP preview, there's now data protections at the device level.

Using Endpoint DLP, IT pros can set policies to block certain end user actions, or just warn them, giving an option to proceed, but all of the actions can get logged. The policies can be set for things like copying files to an external USB device, the clipboard, network file share or cloud storage service. It's possible to set policies on printing sensitive files, too. Policies for "unallowed apps" that try to access sensitive files can be set.

The new Endpoint DLP preview, when available, will show up in the Microsoft 365 Compliance Center portal. The portal now centralizes policy settings for Exchange, SharePoint, OneDrive, Teams and "Devices."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.