Adding a Detection Server
Add the detection servers that you want to your
Symantec Data Loss Prevention
system from the System > Servers and Detectors > Overview
screen. You can add the following types of servers:
- Network MonitorServer, which monitors network traffic.
- Network DiscoverServer, which inspects stored data for policy violations.
- Network Prevent for EmailServer, which prevents SMTP violations.
- Cloud Prevent for EmailServer, which prevents Microsoft Office 365 Exchange traffic violations.
- Network Prevent for WebServer, which prevents ICAP proxy server violations such as FTP, HTTP, and HTTPS.
- Endpoint Prevent Server, which controls Symantec DLP Agents that monitor and scan endpoints.
- Network Discover Cluster Server, which inspects stored data for policy violations.
- Single-Tier Server: By selecting the Single-Tier Server option, the detection servers that you have licensed are installed on the same host as the Enforce Server. The single-tier server performs detection for the following products (you must have a license for each):Network Monitor,Network Discover,Network Prevent for Email,Network Prevent for Web, and Endpoint Prevent.
Symantec recommends that you apply the same hardware and software configuration to all of the detections servers that you intend to use for grid scans.
Symantec Data Loss Prevention
supports grid scans that have up to 11 participating detection servers.- To add a detection server
- Go to theSystem Overviewscreen (System > Servers and Detectors > Overview).
- ClickAdd Server.TheSoftware Serverscreen appears.
- Select the type of server you want to install and clickNext.TheConfigure Serverscreen for that detection server appears.
- To perform the basic server configuration, use theConfigure Serverscreen, then clickSavewhen you are finished.
- In addition to the configuration steps specific to each server, you can configure theOCR EngineorDetectionserverInspection Content Sizefrom tabs on this screen.
- To return to theSystem Overviewscreen, clickDone.Your new server is displayed in theServers and Detectorslist with a status ofUnknown.
- Click on the server to display itsServer/Detector Detailscreen.
- Click[Recycle]to restart the server.
- ClickDoneto return to theSystem Overviewscreen.When the server is finished restarting, its status displaysRunning.
- If necessary, clickServer Settingson theServer/Detector Detailscreen to perform Advanced Server configuration.SeeSymantec Data Loss Preventiononline Help for information about Advanced Server configuration.