Registering a detection server

Before registering a server, you must install and verify the server software.
After the detection server is installed, use the Enforce Server administration console to register the detection server as the type of detection server you want.
  1. To register a detection server
  2. Log on to the Enforce Server as Administrator.
  3. Go to
    System > Servers and Detectors > Overview
    .
    The
    System Overview
    page displays.
  4. Click
    Add Server
    ,
    Software Server
    .
    For detailed information about adding a Cloud Detector, see
    "Adding a cloud detector" in the
    Symantec Data Loss Prevention Help Center
    .
  5. Select the type of detection server to add and click
    Next
    .
    The following detection server options are available:
    • For
      Network Monitor
      Server select
      Network Monitor.
    • For
      Network Discover/Cloud Storage Discover
      Server select
      Network Discover/Cloud Storage Discover.
      If you want to install
      Network Protect
      , make sure you are licensed for
      Network Protect
      and select the
      Network Discover
      option.
      Network Protect
      provides additional protection features to
      Network Discover/Cloud Storage Discover
      .
    • For
      Network Prevent for Email
      Server select
      Network Prevent for Email.
    • For
      Network Prevent for Web
      Server select
      Network Prevent for Web.
    • For
      Endpoint Prevent
      and
      Endpoint Discover
      select
      Endpoint Prevent.
    • For Single-Tier Servers, select
      Single Tier Monitor
      .
    The
    Configure Server
    screen appears.
  6. Enter the General information. This information defines how the server communicates with the Enforce Server.
    • In
      Name
      , enter a unique name for the detection server.
    • In
      Host
      , enter the detection server’s host name or IP address. For a single-tier installation, click the
      Same as Enforce
      check box to autofill the host information. For a
      Single Tier Monitor
      , the local host is pre-selected.
    • In
      Port
      , enter the port number the detection server uses to communicate with the Enforce Server. If you chose the default port when you installed the detection server, then enter 8100. However, if you changed the default port, then enter the same port number here (it can be any port higher than 1024).
    The additional configuration options displayed on the
    Configure Server
    page vary according to the type of server you selected.
  7. Specify the remaining configuration options as appropriate.
    See
    “Server configuration—basic” in the
    Symantec Data Loss Prevention Help Center
    for details on how to configure each type of server.
  8. Click
    Save
    .
    The
    Server Detail
    screen for that server appears.
  9. If necessary, click
    Server Settings
    or other configuration tabs to specify additional configuration parameters.
  10. If necessary, restart the server by clicking
    Recycle
    on the
    Server Detail
    screen. Or you can start the Symantec DLP services manually on the server itself.
  11. To verify that the server was registered, return to the
    System Overview
    page. Verify that the detection server appears in the server list, and that the server status is
    Running
    .
  12. To verify the type of certificates that the server uses, select
    System > Servers > Alerts
    . Examine the list of alerts to determine the type certificates that
    Symantec Data Loss Prevention
    servers use:
    • If servers use the built-in certificate, the Enforce Server shows a warning event with code 2709: Using built-in certificate.
    • If servers use unique, generated certificates, the Enforce Server shows an info event with code 2710: Using user generated certificate.