Overview Data loss occurs when confidential or private information leaves the enterprise as a result of unauthorized communication through channels such as applications, physical devices, or network protocols. McAfee® Data Loss Prevention (McAfee DLP) is a suite of products that protects against data loss by identifying and securing data within your network and offline. McAfee DLP policies help you understand the types of data on your network, how the data is accessed and transmitted, and if the data contains sensitive or confidential information. Use McAfee DLP to build and implement effective protection policies while reducing the need for extensive trial and error. Each of this McAfee DLP product protects different types of data in your network. McAfee® Data Loss Prevention Endpoint (McAfee DLP Endpoint) for Windows — Content-based agent solution that inspects user actions. It scans data-in-use on endpoints and blocks or encrypts unauthorized transfer of data identified as sensitive or confidential. The Endpoint Discovery feature scans local file system and email storage files and applies rules to protect sensitive content. McAfee® Data Loss Prevention Endpoint for Mac (McAfee DLP Endpoint for Mac) — Offers similar protection for Macintosh computers running macOS operating systems. McAfee® Device Control — Controls the use of removable media on endpoints. Device Control contains a subset of the protection rules in McAfee DLP Endpoint for Windows and Mac. McAfee® Data Loss Prevention Discover (McAfee DLP Discover) — Scans network file, Box, SharePoint, and database repositories to identify and protect sensitive data by copying or moving the files, or by applying an RM policy. Registration scans extract fingerprint information from file repositories for file classification and store the signatures in a registered documents database. McAfee® Data Loss Prevention Prevent (McAfee DLP Prevent) — Works with your web proxy or MTA server to protect web and email traffic. McAfee® Data Loss Prevention Monitor (McAfee DLP Monitor) — Passively scans unencrypted network traffic for potential data loss incidents.