Embed Size (px)
Citation preview
Data Loss Prevention 15.5 Licensing Guide
Revised 21 Feb 2019
Note: This document covers licensing for the DLP on-premises software and appliance offerings and does not cover
the DLP hosted cloud service offerings. To learn about the cloud services, refer to the DLP Cloud Services Licensing
Guide on Symantec Sales Central and Symantec PartnerNet.
Page 2
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CONTENTS
CHAPTER 1: PRODUCT OVERVIEW ........................................................................................................................................... 3
CHAPTER 2: WHAT’S NEW ........................................................................................................................................................... 4
CHAPTER 3: LICENSING ................................................................................................................................................................. 5
CHAPTER 4: QUOTING ................................................................................................................................................................... 9
CHAPTER 5: UPGRADES & CROSS-GRADES ......................................................................................................................... 12
CHAPTER 6: SUPPORT AND MAINTENANCE ....................................................................................................................... 12
CHAPTER 7: CUSTOMER TRIALS ............................................................................................................................................. 13
CHAPTER 8: NOT-FOR-RESALE LICENSES ............................................................................................................................ 14
CHAPTER 9: CONTACTS ............................................................................................................................................................. 15
CHAPTER 10: FREQUENTLY ASKED QUESTIONS............................................................................................................... 15
DATA LOSS PREVENTION 15.5 ............................................................................................................................. 15
VERITAS DATA INSIGHT PRODUCTS ................................................................................................................... 19
DISCONTINUED PRODUCTS .................................................................................................................................. 19
CHAPTER 11: LICENSING AT A GLANCE ................................................................................................................................ 20
Page 3
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CHAPTER 1: PRODUCT OVERVIEW
Symantec Data Loss Prevention (DLP) discovers, monitors, and protects sensitive data wherever
it lives. It lets you catch more types of data, respond to critical incidents faster, secure at-risk data
before it falls into the wrong hands, and manage data loss easily.
The Symantec DLP solution comprises a central management console and server, powerful
content-aware detection server(s), and lightweight endpoint agents. Symantec offers customers a
number of flexible deployment options: on-premises, hybrid cloud, and managed services (through
Symantec Partners).
This licensing guide covers Symantec DLP software and appliance-based products, including but
not limited to: DLP Enterprise Suite, DLP Endpoint Discover and Prevent, DLP Network Prevent
for Email and Web, and DLP API Detection Appliances. These products are deployed on-
premises and managed by customers.
Symantec DLP is also offered as cloud-based services that are hosted by Symantec: DLP Cloud
Detection Service and DLP Cloud Service for Email. For information on how to license these
offerings, refer to the DLP Cloud Services Licensing Guide on Symantec Sales Central |
Symantec PartnerNet.
SUITES NETWORK ENDPOINT
• Enterprise Suite
• Discover Suite
• Network Monitor
• Network Prevent for Email
• Network Prevent for Web
• Endpoint Discover
• Endpoint Prevent
STORAGE CLOUD DETECTION
• Network Discover
• Network Protect
• Cloud Prevent for MS Office 365 Exchange
• Cloud Storage [for Box]
• Sensitive Image Recognition1
APPLIANCES DATABASE ADJACENT PRODUCTS
• Network Prevent for Email Virtual Appliance
• Network Prevent for Web Virtual Appliance
• Oracle Standard Edition 22 • Information Centric Security Module
• Information Centric Tagging
• Information Centric Encryption
1 The Symantec DLP Sensitive Image Recognition Add-on includes both Optical Character Recognition and Form Recognition
capabilities. 2 Effective May 7, 2018, Symantec stopped selling Oracle Standard Edition and Oracle Standard Edition One, but will keep selling
Oracle Standard Edition 2.
Page 4
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
• Network Prevent for Web Hardware Appliance
• API Detection for Developer Apps Virtual Appliance
• API Detection Virtual Appliance for SphereShield
• Information Centric Analytics – Powered by Bay Dynamics
• Veritas Data Insight
• Veritas Data Insight Self-Service Portal
CHAPTER 2: WHAT’S NEW DLP 15.5 Symantec Data Loss Prevention 15.5 introduces new information protection capabilities, powered by the industry’s leading data loss prevention technology, to give you greater visibility and control over your confidential data:
• New integration with Symantec Endpoint Protection (SEP) secures data against malicious applications: Together, Symantec Data Loss Prevention and Symantec Endpoint Protection can now stop malicious, suspicious or unknown apps from seizing control of users’ endpoints and stealing sensitive corporate data like intellectual property and PII.
• Detect more data, more accurately with new Exact Matching Data Identifier (EMDI): Effective data protection always starts with good detection. DLP 15.5 features EMDI, a new powerful data fingerprinting detection engine providing accuracy, security and performance for discovery of indexed data. EMDI completes the already broad set of data detection engines included with Symantec DLP and is available on all DLP detection channels.
• Improved detection on endpoints with Data Classification controls: DLP policies can now suggest a classification tag to the end users as they classify newly created content with Symantec Information Centric Tagging (ICT). Additionally, DLP 15.5 has the innovative ability of being able to classify existing data on endpoints. Data Loss Prevention can scan endpoints and apply an appropriate classification tag as a response to a policy violation.
• Expanded integration with Information Centric Encryption (ICE): DLP 15.5 expands protection of sensitive data leaving endpoints via browser uploads.
• Extended application coverage with DLP: DLP 15.5 includes support for more cloud applications through cloud access security broker and for Skype for Business on premises.
To learn more, download the release notes on Symantec Sales Central | Symantec PartnerNet.
Page 5
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
ORACLE 11g END-OF-LIFE Oracle ended support for Oracle 11g Standard Edition (SE) and Standard Edition One (SE1). As a result, Symantec did also end-of-life (EOL) these versions. Effective May 07, 2018, Symantec stopped selling Oracle 11g SE and SE1 – removing them from the corporate price list. Oracle’s new database, Oracle 12c Standard Edition 2 (SE2), will continue to be available for purchase on the corporate price list. For more information about the Oracle EOL and upgrade process, download the Oracle 12c
Standard Edition 2 Sales FAQ: Symantec Sales Central | Symantec PartnerNet.
ORACLE 12c INTRODUCTION Symantec has introduced new Oracle database license SKUs to its DLP price list. This enables new and existing DLP customers to leverage the next generation Oracle database, Oracle 12c Standard Edition 2 (SE2):
• Oracle Standard Edition 2 for Data Loss Prevention
• The following SKUs are available for existing customers to upgrade their perpetual licenses. Note: these upgrades do not include support. Support is purchased separately:
o Data Loss Prevention, Upgrade from Oracle Standard Edition to Oracle Standard Edition 2
o Data Loss Prevention, Upgrade from Oracle Standard Edition One to Oracle Standard Edition 2
For details on how to license these SKUs, go to Chapter 3: Licensing.
CHAPTER 3: LICENSING
DLP products are offered under perpetual or subscription-based licensing model on a per
Managed Device or Managed User basis (refer to Symantec.com for the official definition):
• MANAGED USER: An individual person who has access to a network that is managed,
monitored and/or protected by the Licensed Software.
• MANAGED DEVICE: A device that is managed, monitored or protected by the Licensed
Software but that may not actually be running the Licensed Software itself.
• APPLIANCE: An individual piece of virtualized or physical machine with software installed
to provide a specific computing resource.
Page 6
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
PRODUCTS METER LICENSING GUIDELINES
DLP ENTERPRISE SUITE • Network Monitor
• Network Prevent for Email
• Network Prevent for Web
• Network Discover
• Network Protect
• Endpoint Discover
• Endpoint Prevent
Managed User or Managed Device
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software
OR # of endpoints (physical and virtual3) that is managed, monitored, or protected by the Licensed Software Ensure each product included in the Suite is sufficiently licensed. Licensing for each product is outlined below. For more information, refer to the PUR (Product User Rights).
DLP DISCOVER SUITE • Network Discover
• Network Protect
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
NETWORK PRODUCTS
• Network Monitor
• Network Prevent for Email
• Network Prevent for Web
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
ENDPOINT PRODUCTS
• Endpoint Discover
• Endpoint Prevent
Managed Device
# of endpoints (physical and virtual4 desktops and laptops, no servers) that is managed, monitored, or protected by the Licensed Software.
STORAGE PRODUCTS
• Network Discover
• Network Protect
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
3 If a customer is running virtual desktops or virtual machines in their endpoint environment, then they will need to purchase licenses to
cover those virtual endpoints in addition to any physical endpoints. E.g., Citrix XenApp, Citrix XenDesktop. 4 If a customer is running virtual desktops or virtual machines in their endpoint environment, then they will need to purchase licenses to
cover those virtual endpoints in addition to any physical endpoints. E.g., Citrix XenApp, Citrix XenDesktop.
Page 7
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CLOUD PRODUCTS
• Cloud Prevent for
Microsoft Office 365
Exchange
• Cloud Storage [for Box]
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software. These are software-only products that are managed by customers. For DLP cloud-based offerings, refer to the DLP Cloud Services Licensing Guide on Symantec Sales Central.
DETECTION PRODUCTS
Sensitive Image Recognition
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
APPLIANCES
• Network Prevent for Web
Hardware Appliance
Appliance
Supports up to 10,000 users per Appliance
• Network Prevent for Web
Virtual Appliance
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
• Network Prevent for Web
Virtual Appliance Addon
for ProxySG/ASG
Managed User with User Count Tier
Support up to # of managed users as specified in the long description of the SKU. Only for customers purchasing or renewing Symantec ProxySG/Advanced Secure Gateway. This addon provides promotional pricing for the Network Prevent for Web Virtual Appliance.
• Network Prevent for Email
Virtual Appliance
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
• API Detection for
Developer Apps Virtual
Appliance
Managed User
# of individuals on a single application authorized to use and/or benefits from the use of the Service, or that actually uses any portion of the Service A subscription quantity of 1 API Detection for Developer Apps can be used for a single user in conjunction with only a single application.
• API Detection Virtual
Appliance for
SphereShield
Managed User
# of individuals on a single application authorized to use and/or benefits from the use of the Service, or that actually uses any portion of the Service. To integrate DLP with Skype for Business, customers need to buy SphereShield for Skype for Business from AGAT Software in addition to the API Detection Virtual Appliance for SphereShield.
Page 8
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
ADJACENT PRODUCTS
Information Centric Security
Module (ICSM)
Managed User
To learn more, download the ICSM Licensing Guide: Sales Central | PartnerNet
Information Centric Tagging
(ICT)
Managed User
To learn more, download the ICT Licensing Guide: Sales Central | PartnerNet
Information Centric Encryption (ICE)
Managed User
To learn more, download the ICE Licensing Guide: Sales Central | PartnerNet
Information Centric Analytics - Powered by Bay Dynamics (ICA)
Managed User
# of individuals who have access to a network that is managed, monitored and/or protected by the Licensed Software.
Veritas Data Insight &
Veritas Data Insight Self
Service Portal
User
See definition in Veritas Product User Right (PUR)
ORACLE
Symantec DLP requires an Oracle database for the DLP Enforce Platform to store all system
information, including historical incident snapshot details. This enterprise-class database is proven
to be robust, scalable and secure, and meets the needs of the largest organizations.
Symantec supports Oracle in single- or two-tier DLP deployments in which the database runs on
the same physical machine as Enforce. We also support Oracle in a three-tier DLP deployment in
which the database runs on a separate tier (different physical machine) from Enforce to allow the
application to take advantage of Oracle database clustering support.
Customers can use their own Oracle site license if their Oracle license agreement allows them to
create a separate database instance for DLP and they are entitled to a version of Oracle
supported by Symantec DLP.
ORACLE VERSIONS
Symantec currently resells Oracle 12c Standard Edition 2 (SE2).
PRODUCT METER* MAXIMUM CAPACITY
Oracle Standard Edition 2 (SE2)
CPU • Up to 2 CPU sockets, max
of 16 threads
• Single server deployments
(*) Quantity of 1 license entitles server with 1 CPU. For multi-chip modules, each chip in the module counts as a
1 CPU. Count of cores in multi-core processor is irrelevant for determining licensing quantity.
Page 9
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
ORACLE SE/SE1 END-OF-LIFE
Oracle ended support for Oracle 11g SE and SE1. As a result, Symantec did also end-of-life
(EOL) these versions and stopped selling them EFFECTIVE ON MAY 7, 2018. Oracle 12c SE2,
will continue to be available for purchase on the corporate price list.
NEW CUSTOMERS should purchase the latest version of Oracle, Oracle 12c SE2, rather than
Oracle 11g SE/SE1.
EXISTING CUSTOMERS will need to be upgraded from Oracle 11g SE/SE1 to Oracle 12c SE2 at
or prior the time of their renewal.
For more information about the Oracle EOL and upgrade process, download the Oracle 12c
Standard Edition 2 Sales FAQ: Symantec Sales Central | Symantec PartnerNet.
CHAPTER 4: QUOTING
EXAMPLE #1: DLP ENTERPRISE SUITE
A customer wants to protect sensitive data across multiple data loss channels (network, endpoint,
and storage) and needs coverage for 10,000 enterprise users. Here are the products that you
should offer the customer:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Enterprise Suite, License, 10,000-49,999 10,000 USERS
Data Loss Prevention Enterprise Suite, Initial Software Maintenance, 10,000-49,999 1 YR
10,000 USERS
Oracle Standard Edition 2 for Data Loss Prevention, License, Per CPU 2 CPUs
Oracle Standard Edition 2 for Data Loss Prevention, Initial Software Maintenance, Per CPU 1 YR
2 CPUs
Page 10
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
EXAMPLE #2: DETECTION ADDON
A customer wants to protect sensitive data in images across multiple data loss channels and
needs coverage for 10,000 enterprise users. Here are the products that you should offer the
customer:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Sensitive Image Recognition Addon, License 10,000-49,999
10,000 USERS
Data Loss Prevention Sensitive Image Recognition Addon, Initial Software Maintenance, 10,000-49,999 Managed User 1 YR
10,000 USERS
EXAMPLE #3: VIRTUAL APPLIANCE
A customer wants to protect sensitive web communications and needs coverage for 5,000 users.
They prefer a virtual appliance form factor. You should offer the customer a 1-year subscription of
the Network Prevent for Web Virtual Appliance:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Network Prevent for Web Virtual Appliance, Initial Subscription License with Support, 5,000-9,999 Users 1 YR
5,000 USERS
EXAMPLE #4: VIRTUAL APPLIANCE
A customer that is to purchase or renew ProxySG/ASG appliances wants to add DLP protection
for sensitive web communications and needs coverage for 4,900 users. You may offer the
customer a 1-year subscription of the Network Prevent for Web Virtual Appliance Addon for
ProxySG/ASG for 5000 managed users:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Network Prevent for Web Virtual Appliance Addon For ProxySG/ASG, Initial Subscription License with Support, 5000 Managed Users 1 YR
1
Page 11
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
EXAMPLE #5: VIRTUAL APPLIANCE
A customer wants to expand monitoring to 2 internal applications and needs coverage for 5,000
users. You should offer the customer the DLP API Detection for Developer Apps Virtual
Appliance. Each appliance is licensed on a per user per app basis, so you will need to quote 2
appliances:
SKU DESCRIPTION QUANTITY
Data Loss Prevention API Detection for Developer Apps Virtual Appliance, Initial Subscription License with Support, 5,000-9,999 Users 1 YR
5,000 USERS
Data Loss Prevention API Detection for Developer Apps Virtual Appliance, Initial Subscription License with Support, 5,000-9,999 Users 1 YR
5,000 USERS
EXAMPLE #6: HARDWARE APPLIANCE
A customer wants to protect sensitive web communications and needs coverage for 5,000 users.
They prefer a hardware appliance form factor. You should offer the customer the Network Prevent
for Web Hardware Appliance. Each hardware appliance supports up to 10,000 users, so you will
need to quote 1 unit:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Network Prevent for Web Hardware Appliance S500-10 1 UNIT
End Customer Support, Level 1->3 Software Support & Next Business Day Delivery Hardware Support
17%
EXAMPLE #7: HARDWARE APPLIANCE
A customer wants to protect sensitive web communications and needs coverage for 15,000 users.
They prefer a hardware appliance form factor. You should offer the customer the Network Prevent
for Web Hardware Appliance. Each appliance supports up to 10,000 users, so you will need to
quote 2 units:
SKU DESCRIPTION QUANTITY
Data Loss Prevention Network Prevent for Web Hardware Appliance S500-10 2 UNITS
End Customer Support, Level 1->3 Software Support & Next Business Day Delivery Hardware Support
17%
Page 12
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CHAPTER 5: UPGRADES & CROSS-GRADES
VERSION UPGRADES
Customers with 1) valid perpetual licenses and current maintenance or 2) valid subscription
licenses may upgrade their DLP software at no additional charge.
CROSS-GRADES
As of April 2017, Symantec discontinued the sale of software cross-grade licenses for DLP. This
change only affects cross-grades for DLP Network Monitor, DLP Network Prevent for Email and
DLP Network Prevent for Web.
CHAPTER 6: SUPPORT AND MAINTENANCE
Symantec Support Services offers two support and maintenance options for DLP:
SUPPORT LEVEL
ESSENTIAL SUPPORT
REMOTE PRODUCT SPECIALIST
Severity One Response Time Targets
30 minutes 15 minutes
Telephone Access to Support Engineers
24X7X365 24X7X365
Downloadable Software Upgrades, Updates and Patches
Included Included
Designated Callers 6 per title of software 6 per product family
Page 13
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CHAPTER 7: CUSTOMER TRIALS
How to Request
Symantec offers customers 60-day or 90-day evaluation licenses for DLP Software, Appliances
and Cloud Services.
Symantec Partners can request a license from PartnerNet or your Symantec Partner Account
Manager.
Symantec Sales can request a license by following the steps below for Trials.
Software Trial
Symantec offers customers a 90-day Evaluation License for DLP and Information Centric Tagging.
To order a license for the software products listed below, follow the SFDC Evaluation Request
Process and use the Evaluation License SKUs from the Symantec Internal Price List.
• Data Loss Prevention Comprehensive (Software Only) Evaluation License includes these
products:
o DLP Network Monitor and Network Prevent for Email and Web
o DLP Network Discover
o DLP Network Protect
o DLP Endpoint Discover
o DLP Endpoint Prevent
o DLP Cloud Storage
o DLP Cloud Prevent for Microsoft Office 365 Exchange
o DLP Sensitive Image Recognition
o Information Centric Analytics – Powered by Bay Dynamics
o Veritas Data Insight for Data Loss Prevention
o Veritas Data Insight Self Service Portal Addon for DLP
o Oracle for DLP
• Information Centric Tagging Evaluation License (not included in the DLP Comprehensive
Evaluation License)
Appliance Trial
Symantec offers customers a 90-day Trial-And-Buy (TAB) license for DLP Appliances (hardware and
virtual). To request a license, place an order with a TAB SKU that is available on the Symantec
Corporate Price List.
Page 14
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
Cloud Service Trial
Symantec offers customers 90-day evaluations for DLP Cloud Services, Information Centric
Encryption (ICE) and Information Centric Security (ICS) Module.
• DLP Cloud Services: Online Form (Internal) | PartnerNet
• DLP Cloud Services with Cloud Console: Electronic Form (Internal) | PartnerNet
• ICE Customer Trial: Online Form (Internal) | Electronic Form (Partners)
• ICS Customer Trial: Electronic Form (Internal) | Electronic Form (Partners)
Note: Extended customer evaluation licenses beyond 90 days are also available for purchase. For
assistance, please email the DLP Contacts listed in Chapter 9.
CHAPTER 8: NOT-FOR-RESALE LICENSES
Symantec offers 1-Year Not-For-Resale (NFR) licenses for DLP on-premises software and
appliance products. NFR licenses are solely for the purchases of internal training, testing, or
setting up a demo environment (not internal production environments).
Internal Employees:
• For Software NFRs, follow Internal License Request Process (Use SKU: DLP-NFR-1Y)
• For Appliance NFRs, follow Internal License Request Process
Partners:
• For Software NFRs: Submit order directly via partner’s dashboard on PartnerNet (login
required), following the Software New Order process flow for NFRs.
• For Appliance, Submit order using the respective NFR SKUs on the Corporate Price List: 1-year
NFR licenses for DLP Virtual Appliances and 3-year NFR licenses for the DLP Hardware
Appliance.
• For DLP Cloud Services, purchase the non-production sandbox option SKUs that can be found
on the Symantec Corporate Price List.
For help, contact Symantec Global Partner Program Management ([email protected])
or your Symantec Partner Account Manager.
Page 15
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
CHAPTER 9: CONTACTS
DLP PRODUCT TEAM
• [email protected], Product Manager, DLP Business Operations
• [email protected], Sr. Product Marketing Manager, DLP
• [email protected], Sr. Product Marketing Manager, DLP
DEAL QUOTING
• Symantec Partners: Contact your Symantec Partner Account Manager
• Symantec Employees: Contact your Regional Sales Support Helpdesk
o Americas: [email protected]
o EMEA: [email protected]
o APJ:
▪ ASR: [email protected]
▪ PAC: [email protected]
▪ Korea: [email protected]
▪ GCR: [email protected]
▪ Japan: [email protected]
▪ India: [email protected]
CUSTOMER LICENSES
Contact Symantec Support via https://support.symantec.com or [email protected].
CHAPTER 10: FREQUENTLY ASKED QUESTIONS
DATA LOSS PREVENTION 15.5
1. When will DLP 15.5 become Generally Available (GA)?
December 21, 2018. To learn more, download the release notes on Symantec Sales Central |
Symantec PartnerNet.
2. How long can I sell DLP 15.1 for?
After December 21, 2018, you can no longer sell licenses and initial support on DLP 15.1 to
new customers. For quotes created on DLP 15.1 SKUs that’ve been provided to the customer
prior to December 21, 2018 and are still valid, order admin can typically be booked by re-
activating the 15.1 SKUs.
Page 16
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
3. How do customers download the software and retrieve their license key for DLP 15.5?
Customers who purchase or renew DLP 15.5 will receive an order fulfilment email with
instructions to log in to our one-stop support portal called MySymantec, where they can
download the software, retrieve their license keys, and activate their product. For more
information, please see the Getting Started Guide: Symantec Technical Support.
4. If a current customer wants to upgrade from DLP 15.1 (or prior), do they need to
purchase new licenses for DLP 15.5?
No, customers with current maintenance are entitled to upgrade at no additional charge as part
of their maintenance agreement with Symantec. They do not need to purchase a new license
for DLP 15.5. NOTE: This excludes Oracle. Upgrade of Oracle to Oracle Standard Edition 2
requires purchase of a separate upgrade SKU and maintenance for Oracle Standard Edition 2.
5. If a current customer wants to upgrade from DLP 15.1 (or prior), do they need to
purchase new licenses for Oracle?
No, customers with current maintenance do not need to purchase a new license for Oracle.
You can continue using the Oracle version previously released with DLP 15.0.
However, due to the EOL of Oracle 11g, existing customers will need to be upgraded from
Oracle 11g SE/SE1 to Oracle 12c SE2 prior or at the time of their renewal. For details on the
EOL and upgrade process, go to Chapter 3: Licensing.
6. Where can I find the End-User License Agreement (EULA)?
It is available on www.symantec.com/about/profile/policies/eulas
7. Where can I find the last date of support for a particular version of Symantec DLP?
It is available on https://support.symantec.com/en_US/dpl.56500.html
8. Which products are included in the DLP Enterprise Suite SKU?
• Network Monitor
• Network Prevent for Email
• Network Prevent for Web
• Network Discover
• Network Protect
• Endpoint Discover
• Endpoint Prevent
Page 17
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
It does not include: DLP Appliances, DLP Cloud Services, DLP Cloud Prevent for Microsoft
Office 365 Exchange, DLP Cloud Storage, DLP Sensitive Image Recognition, Oracle for DLP,
Veritas Data Insight or Veritas Data Insight Self-Service Portal. They must all be purchased
separately from the DLP Enterprise Suite.
9. How does a customer buy the DLP Sensitive Image Recognition Addon?
Sensitive Image Recognition (SIR) is an add-on detection product that can be purchased by
customers who own one or more of our network and/or storage detection products: Network
Monitor, Network Prevent for Email, Network Prevent for Web, Network Discover and Network
Protect. It is licensed on a per managed user basis. Each managed user license can be used
for any number of their DLP detection servers.
Customers who own DLP Form Recognition will not be entitled to SIR when they upgrade to
DLP 15 and newer versions. For customers who have previously purchased Form Recognition
license and are current on maintenance, non-standard pricing on SIR can be offered on a case
by case basis to account for the previous investment in Form Recognition.
Note: Sensitive Image Recognition is not supported on the DLP Endpoint Agent, DLP
Appliances or DLP Cloud Services.
10. Can a customer buy the network products separately?
Network Monitor can be bought as a standalone product. Network Prevent for Email and Network
Prevent for Web must be bought bundled with or as an add-on to Network Monitor. The only
exception is when the customer already owns Symantec Messaging Gateway.
These are the options for buying the network products:
a) Network Monitor standalone
b) Network Monitor + Network Prevent for Email bundle
c) Network Monitor + Network Prevent for Web bundle
d) Network Monitor + Network Prevent for Email + Network Prevent for Web bundle
e) Symantec Messaging Gateway + Network Prevent for Email Add-On (does not require
Network Monitor)
11. I have a customer with 1,000 users who need to be protected by DLP. All of the users
have access to a computer for work-related activities. However, only 800 of the users
can send email and access the Internet; the other 200 users cannot send email or
access the Internet (blocked by a proxy server). How many licenses of Network Monitor,
Network Prevent for Email, and Network Prevent for Web do they need?
Page 18
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
The customer will need 1,000 licenses of Network Monitor, Network Prevent for Email, and
Network Prevent for Web. DLP for Network products are licensed per Managed User. A
Managed User is anyone who has access to a network that is managed, monitored and/or
protected by DLP. It doesn’t matter whether the person has access to email and web. What
matters is the potential risk of that person leaking confidential data over the network that is
protected by the software. Therefore, the number of licenses required is based on total number
of employees or networked users.
12. I have a customer with 10,000 employees, but they only want to buy Network Discover
for 1,000 users. Can they do that?
It depends. Most customers choose to purchase coverage for all enterprise users who have
access to the corporate network, which includes the data and document repositories to be
scanned by Network Discover. You could argue, “Well, I only want to scan a Microsoft
SharePoint site and I only give 1,000 users access to it. So, I really don’t need those extra
9,000 licenses.” But …
• How do you know which files and folders contain sensitive data?
• How do you know which users and groups should have access to that data?
• What if those users and groups are given access privileges that are far too broad (i.e.,
outside the scope of their role)?
• What if unauthorized users gain access to the site and download sensitive documents?
13. My customer has 1,000 users who could use Citrix XenApp (or Microsoft Hyper-V or
Terminal Services) and installs an Endpoint agent on the XenApp server, which can
support up to 100 concurrent sessions. Do they need 1,000 licenses for all the users
that may connect or just 100 licenses for the maximum concurrent number of
sessions)?
100. In this virtualization scenario, the license quantity is based on the maximum number of
concurrent session supported by the XenApp server.
14. My customer has a perpetual license for Network Prevent for Web. Is there a cross-
grade SKU for my customer to move to Network Prevent for Web hardware appliance?
No. Network Prevent for Web hardware appliance is licensed per appliance. There is no cross-
grade between different meters.
15. My customer has a perpetual license for Network Prevent for Web. Is there a cross-
grade SKU for my customer to move to Network Prevent for Web virtual appliance?
No. Network Prevent for Web virtual appliance is subscription only. There is no cross-grade
between different licensing models.
Page 19
Symantec Sales Tools
Licensing and Support Services Guide
Symantec Data Loss Prevention 15.5
16. My customer has a subscription license for Network Monitor and Network Prevent for
Web bundle. Is there a cross-grade SKU for my customer to move to Network Prevent
for Web virtual appliance?
No. Your customer can purchase subscription license for Network Prevent for Web virtual
appliance once their current subscription of Network Monitor and Network Prevent for Web
bundle is expired.
VERITAS DATA INSIGHT PRODUCTS
Effective October 3rd 2016, Symantec introduced two new bundles, Symantec DLP Enterprise Suite
and Symantec DLP Discover Suite, to replace Symantec DLP Suite and Symantec DLP Discover Plus,
respectively. The new bundles include the same products as the old bundles MINUS VERITAS DATA
INSIGHT. The old bundles, DLP Suite and DLP Discover Plus, were end of lifed on October 3, 2016.
In addition, the Veritas Data Insight and Veritas Data Insight Self Service Portal products will no longer
be part of the DLP ENTFLEX family SKU effective October 3, 2016. Customers will continue to be able
to purchase Data Insight and Data Insight Self Service Portal via standalone SKUs.
To learn more about these packaging changes and how they affect customer support,
entitlement, and renewals, download the “Sales FAQ: Removal of Veritas Data Insight from Data
Loss Prevention Bundles” on Symantec Sales Central | Symantec PartnerNet.
DISCONTINUED PRODUCTS
Effective September 4th 2017, Symantec discontinued two offerings: Symantec DLP for Mobile and Symantec DLP Form Recognition Add-on. The Symantec DLP for Mobile offering, which was comprised of the Symantec DLP Mobile Email Monitor and Symantec DLP Mobile Prevent for Web products, was deprecated in DLP 14.6 and has been removed from subsequent releases starting in DLP 15.0.
The Symantec DLP Form Recognition Addon offering has been discontinued and is available as part of the Symantec DLP Sensitive Image Recognition Addon offering, which is comprised of Form Recognition and Optical Character Recognition.
• Perpetual Licenses: Existing DLP Form Recognition customers with perpetual licenses and active maintenance can continue to use the product and receive support following the end of support timelines.
• Subscription Licenses: Existing DLP Form Recognition customers with subscription licenses will continue to be able to use the product until the end of their subscription terms.
CHAPTER 11: LICENSING AT A GLANCE
Product Name Meter Perpetual Subscription
Bundles Data Loss Prevention Enterprise Suite Mgd User & Mgd Device Y Y
Data Loss Prevention Discover Suite Mgd User Y Y
Network
Data Loss Prevention Network Monitor Mgd User Y Y
Data Loss Prevention Network Monitor and Network Prevent for Email Mgd User Y Y
Data Loss Prevention Network Monitor and Network Prevent for Email and Web Mgd User Y Y
Data Loss Prevention Network Monitor and Network Prevent for Web Mgd User Y Y
Endpoint Data Loss Prevention Network Prevent for Email Addon for Messaging Gateway Mgd User Y
Data Loss Prevention Endpoint Prevent Mgd Device Y Y
Storage Data Loss Prevention Network Discover Mgd User Y Y
Data Loss Prevention Network Protect Addon Mgd User Y Y
Cloud Data Loss Prevention Cloud Prevent for Microsoft Office 365 Exchange Mgd User Y
Data Loss Prevention Cloud Storage Mgd User Y
Detection Data Loss Prevention Sensitive Image Recognition Addon Mgd User Y Y
Appliances
Data Loss Prevention Network Prevent for Web Virtual Appliance Mgd User Y
Data Loss Prevention Network Prevent for Web Addon for ProxySG/ASG VA Mgd User Y
Data Loss Prevention Network Prevent for Email Virtual Appliance Mgd User Y
Data Loss Prevention API Detection for Developer Apps Virtual Appliance Mgd User Y
Data Loss Prevention API Detection Virtual Appliance for SphereShield Mgd User Y
Data Loss Prevention Network Prevent for Web Hardware Appliance Appliance Y
Oracle Oracle Standard Edition 2 for Data Loss Prevention CPU Y Y
Adjacent Products
Tagging & Encryption/DRM
Information Centric Security Module User Y
Information Centric Tagging User Y Y
Information Centric Encryption User Y
UEBA Information Centric Analytics User Y
Veritas VTAS Data Insight for Data Loss Prevention User Y Y
VTAS Data Insight Self Service Portal Addon for Data Loss Prevention User Y Y
