{"id":51846,"date":"2022-07-04T09:34:06","date_gmt":"2022-07-04T01:34:06","guid":{"rendered":"https:\/\/version-2.com\/?p=51846"},"modified":"2022-07-25T17:42:08","modified_gmt":"2022-07-25T09:42:08","slug":"differences-between-saas-dlp-and-legacy-on-prem-data-loss-prevention-solutions","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2022\/07\/differences-between-saas-dlp-and-legacy-on-prem-data-loss-prevention-solutions\/","title":{"rendered":"Differences between SaaS DLP and legacy on-prem Data Loss Prevention solutions"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

\"\"<\/p>\n

It can be too complex and heavyweight for small and midsized companies handle legacy DLP solutions. But SMBs with limited IT capacities also face the same risks of internal data leakage, and the resulting incident impacts can be devastating. Luckily there\u2019s an alternative \u2013 cloud-native SaaS DLP.<\/p>\n\n<\/svg><\/span>
\n

If you run an SMB company or work for one, you usually have limited to no in-house hardware infrastructure, because there\u2019s usually no reason to manage your own servers.<\/p>\n<\/svg><\/span>
\n

SMBs also have minimal IT capacities, and due to the broad scope of IT admin or manager responsibilities, there\u2019s little room for increasing their security expertise.<\/p>\n<\/svg><\/span>
\n

That\u2019s why it can be almost impossible to implement a legacy DLP solution, even though it could help prevent sensitive or confidential data from leaking outside of the company.<\/p>\n\n

\n

The main barriers usually are: <\/strong><\/p>\n

    \n
  • Requirements for available hardware infrastructure (servers and databases)<\/li>\n
  • Lengthy and costly implementation projects (quarters\/years to implement)<\/li>\n
  • Labor- and skill-intensive administration with dedicated specialists needed<\/li>\n<\/ul>\n<\/div>\n

    Legacy DLP alternative: Next-gen SaaS DLP<\/span><\/h2>\n

    The cloud is the way to go when you don\u2019t have or don\u2019t want to have your own servers. With cloud\/SaaS you can use the solution as a service, so you don\u2019t need to worry about keeping it up and running. The vendor\u2019s SLA ensures DLP availability.\n\nThe advantage of a cloud-native DLP solution is that it\u2019s designed from scratch to run in the cloud efficiently and reliably. It\u2019s also multi-tenant by design so that it can be provided and managed by MSPs (Managed Service Providers).\n\nThe \u201ccloud-native\u201d and \u201cmulti-tenant\u201d architecture also means that it can be deployed in minutes. There\u2019s no need to install servers, databases, or a management console. The only installation required is the remote deployment of \u201cclients\u201d to endpoint devices.<\/p>\n\n

    Ease of use comes with next-gen solutions<\/h3>\n

    Whether a DLP solution is centrally managed by a MSP or by an IT manager in a SMB organization, it needs to be easy to use and as simple to manage as possible. In other words, it should be straightforward and semi-automated, with pre-configured settings and out-of-box templates.\n\nWe in Safetica think that next-gen DLP, which is primarily \u201crisk-driven\u201d, must employ smart analytics to evaluate both the risk of data operations and individual users. Because knowing your risk level can help you anticipate potential incidents that could be difficult to secure using only DLP policies.<\/p>\n

    \"\"<\/p>\n\n

    Cloud-native but still endpoint DLP<\/h3>\n

    Some vendors provide \u201cCloud DLP\u201d solutions that mainly protect data stored in the cloud or SaaS applications. You may have also heard about CASBs (usually agentless Cloud Access Security Brokers), which protect data from being transferred to and from the cloud. These solutions require an internet connection to protect data.<\/p>\n

    For Safetica, next-gen cloud or SaaS DLP is a solution managed from a cloud console (via a web browser) that provides data security and risk assessment directly on endpoint devices.<\/p>\n

    Safetica\u2019s SaaS DLP is agent-based, meaning the client must be hosted on the computer that classifies the sensitive or confidential data, enforces the DLP policies, and collects data for risk evaluation.<\/p>\n

    One of the main advantages of an endpoint DLP is that it always works, even when the device is offline.<\/p>\n

    With endpoint DLP managed from the cloud, you can still prevent data from being uploaded to an unsecured cloud and classify (and protect) data downloaded from cloud services.<\/p>\n

    When combined with CASB, the endpoint DLP provides complete protection against data leakage.<\/p>\n\n

    SaaS \u2013 DLP as a Service <\/h3>\n

    When using DLP solution as a service you should have transparent and convenient subscription options \u2013 either monthly or annually.<\/p>\n

    The main benefit of a monthly subscription is that you can increase and decrease the number of protected users on a monthly basis.<\/p>\n

    Also, a monthly subscription may be more attractive in terms of cash-flow management. On the other hand, annual subscriptions are usually cheaper.<\/p>\n

    In Safetica we offer a pay-as-you-go model with a \u201cper-user policy\u201d. Customers pay based on the number of users they need to protect.<\/p>\n\n

    TCO of SaaS DLP vs. legacy on-prem DLP<\/h3>\n

    When considering which solution to choose it\u2019s important to calculate the total cost of ownership. If you simply compare the license\/subscription price per user, an SaaS can appear more costly.<\/p>\n

    However, with a legacy on-premise DLP solution, you need to consider the cost of buying, operating, and maintaining servers and databases (including possible hosting or datacenter costs). You usually also hold full responsibility for keeping the server with the management console available.<\/p>\n

    Administration of complex DLP solutions also require more experienced specialists with a significantly larger time capacity. In our experience, the difference could be 1+ man-day per week in the case of legacy on-prem DLP vs. a couple of hours per week with next-gen SaaS DLP.<\/p>\n

    And what do our customers think of the future of business? Vladim\u00edr P\u00fcschner, IT PMO & Innovation Director at Direct Parcel Distribution CZ considers SaaS and cloud applications as the way to go.<\/strong><\/p>\n