Deployment options

A basic deployment might have just one management server and an analytics server. To extend enforcement capabilities, it might add a protector.

The high-level illustration shows a basic deployment ideal for a smaller- to medium- sized organization with a single Internet egress point. (The illustration is intended to show the general distribution of components and does not include network details, such as segmenting, internal firewalls, routing, switching, and so forth.)

• The analytics server is used for Incident Risk Ranking reports.
• The protector can protect several channels, including SMTP, HTTP, FTP, and ICAP.

The servers can be configured to either monitor or monitor and protect sensitive data.

The following illustration is a high-level diagram of a larger Forcepoint DLP deployment:

This shows the extended capabilities of Forcepoint DLP incorporated into a more complex network environment. It includes an extra Forcepoint DLP server and several additional agents to support larger transaction volumes and numbers of users. Very large deployments can have multiple Forcepoint DLP servers and protectors.