4. Browser-Based DLP
Goal
Demonstrate Harmony Browse DLP solution for file uploads, downloads, pasted data (paste content into an external resource) and text control (type text in an external resource text box) to protect sensitive information from being accessed, shared, or distributed inappropriately.
Discussion points
-
Safeguard your data against accidental loss
-
Gain visibility into data mobility. Logs & Reports based on your needs
-
Regulate the movement of data while ensuring the seamless user experience
Instructions
From the Jump-Server machine use the remote desktop link to connect to the Windows Server machine and open the Chrome browser.
DLP File Download Protection
The use case for DLP (Data Loss Prevention) download protection involves scenarios where users attempt to download documents from internal resources.
|
Step |
Instructions |
|---|---|
|
1 |
To demonstrate DLP for file downloads, Open Chrome Browser and visit https://dlptest.com/sample-data/ (offering a downloadable file with PCI data examples) or click on the ‘DLP Download’ bookmark in the Chrome browser.
|
|
2 |
Right click on some example and choose ‘Save link as …’. The domain resource dlptest.com, which is providing the download, is configured in the DLP Inbound Events policy to monitor for downloads of sensitive data. The browser extension intercepts and prevent the file download.
|
DLP File Upload Protection
The use case for DLP (Data Loss Prevention) upload protection involves scenarios where users attempt to upload internal / sensitive documents to external resources.
|
Step |
Instructions |
|---|---|
|
1 |
To demonstrate DLP for file uploads, We will use the quick_search.C file with source code stored in Documents folder.
|
|
2 |
Open Chrome Browser and visit https://www.online-spellcheck.com/spell-check-file (website offering a spelling check for uploaded files) or click on the ‘DLP Upload’ bookmark in the Chrome browser.
|
|
3 |
Click Browse and choose the locally saved file with code example. The domain resource online-spellcheck.com is configured in the DLP Outbound Events policy to monitor for uploads of sensitive data. The browser extension intercepts and prevent the file upload.
|
DLP Text Control
The use case for DLP (Data Loss Prevention) Text Control protection involves scenarios where users attempt to type text in an external resource text box, For example, in Gen AI sites.
|
Step |
Instructions |
|---|---|
|
1 |
Open Chrome Browser and visit https://dlptest.com/sample-data/ or click on the ‘DLP Download’ bookmark in the Chrome browser and copy example of credit card number. |
|
2 |
Navigate to copilot.microsoft.com (use the saved bookmark Copilot), paste the data and click submit button. The same test can be repeated while navigating to chatgpt.com (used the saved bookmark ChatGTP). |
|
3 |
The browser extension intercepts the submit request and prevent the text from being sent.
|
DLP Clipboard Paste control
The use case for DLP (Data Loss Prevention) Paste Control protection involves scenarios where users attempt to paste content into an external resource, For example, in Gen AI sites.
|
Step |
Instructions |
|---|---|
|
1 |
Open the quick_search.C file located in Documents folder and copy its content to clipboard (select all text and right click Copy). |
|
2 |
Open Chrome Browser, Navigate to copilot.microsoft.com (use the saved bookmark Copilot) and try to paste the data from clipboard. The same test can be repeated while navigating to chatgpt.com (used the saved bookmark ChatGTP). |
|
3 |
The browser extension intercepts the submit request and prevent the text from being pasted.
|
Review DLP Events
|
Step |
Instructions |
|---|---|
|
1 |
Navigate back to the Jump server and login to the Infinity portal through the chrome browser (Environment Information). |
|
2 |
Verify you choose chkp-demodays.xyz account and Harmony Browse service. |
|
3 |
Navigate to the LOGS tab and filter for Endpoint DLP events. Check the logs correlating to detected DLP events on the client.
|
