Out of the Box
Default Environment
The first stage of DLP environment uses the Data Loss Prevention Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP. policy provided Out of the Box.
-
Automatic inspection of data is based on built-in Check Point expert heuristics and compliance to various regulations.
-
Users in your organization transmit data as a part of their daily tasks. DLP catches incidents that match rules of the policy. In this stage you set the Rules to Detect, it allows you to monitor usage and understand the specific needs of your organization, and you do not disrupt your users.
-
You audit the data as you use experience-driven severity ratings, and the Logs & Monitor tracks to find the key data leaks.
Data Loss Prevention in SmartDashboard
To show these pages in SmartDashboard:
In SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., select Security Policies > Shared Policies > DLP and click Open DLP Policy in SmartDashboard.
SmartDashboard Legacy Check Point GUI client used to create and manage the security settings in versions R77.30 and lower. In versions R80.X and higher is still used to configure specific legacy settings. opens and shows the DLP tab.

Page |
Function |
---|---|
Policy |
Manage the rule base |
Whitelist Policy |
Manage files that the DLP Rule |
Data Types |
Define representations of data assets to protect. |
Repositories |
Manage the fingerprint and whitelist repositories. The fingerprint repository contains documents that are not allowed to leave the organization. The whitelist repository contains documents that can leave the organization. |
My Organization |
Define the internal environment: networks, users, email addresses, and VPN communities. |
Gateways |
Enable the Data Loss Prevention Software Blade |
UserCheck |
Manage UserCheck objects that are used in a Rule Base to:
|

Page |
Function |
---|---|
Protocols |
Enable the protocols to be checked on individual DLP Gateways. |
Mail Relay |
Configure the mail server for DLP to send notification emails. |
Email Addresses or Domains |
Manage email address lists and domains for use in DLP rules and Data Types. |
Watermarks |
Configure the tracking option that adds visible watermarks or invisible encrypted text to Microsoft Office documents (Word, Excel, or PowerPoint files from Office 2007 and higher) that are sent as email attachments (outgoing and internal emails). |
Advanced |
|
HTTPS Inspection |
Configure inspection of HTTPS / SSL traffic from enterprise networks to external destinations. |