server lockdown and DLP features

[kav_newbie]

As the title/subject implies, how is Kaspersky Next able to address server lockdown and DLP features of Sophos?

[Tahmeed702]

On 6/3/2025 at 6:00 PM, kav_newbie said:

As the title/subject implies, how is Kaspersky Next able to address server lockdown and DLP features of Sophos?

Please explain Server Lockdown and DLP features provided by Sophos , what these features do , how it works .. If provide these info then we can cross-check do these feature ca be covered by Kaspersky Solutions. 

[kav_newbie]

Dear @Tahmeed702

Sophos DLP will simply prevent users from copying or sending sensitive data from their laptop to a USB or external hard drive, even sending it via corporate or personal email.

Though based on my internal research, Kaspersky has similar function but for cloud applications only

On the other hand, Server Lockdown prevents unauthorized software from running on servers. Only authorized applications may run on the server with Sophos Endpoint installed.

 

[Tahmeed702]

8 hours ago, kav_newbie said:

Dear @Tahmeed702

Sophos DLP will simply prevent users from copying or sending sensitive data from their laptop to a USB or external hard drive, even sending it via corporate or personal email.

Though based on my internal research, Kaspersky has similar function but for cloud applications only

On the other hand, Server Lockdown prevents unauthorized software from running on servers. Only authorized applications may run on the server with Sophos Endpoint installed.

 

In Kaspersky Device control helps to block USB and Removable Drive or External HDD,  and Application Control block untrusted application based on rules set by admin only allowed App will run in the OS. 

Device Control 

https://support.kaspersky.com/keswin/11/en-us/34890.htm

Application Control 

https://support.kaspersky.com/keswin/11/en-us/130540.htm

Kaspersky Security for SharePoint has DLP features in it. 

[Renan Corassa]

Remembering that this KES "DLP" feature is just a slice of the entire range of DLP that exists.

It is easier to consider this as a usage control feature rather than a protection feature in itself.

Edited 41 minutes ago by Renan Corassa