Acronis DeviceLock DLP provides comprehensive endpoint DLP (endpoint data loss prevention) – discovering and protecting sensitive data while monitoring the operations involving that information.

Minimize insider threats

Prevent data leakage due to employee negligence or malicious insiders by blocking any unauthorized attempt to access or transfer data, discovering and protecting sensitive data-at-rest.

Gain visibility into data protection

Reduce the complexity of data protection and cut reporting times with a single DLP solution for thorough visibility over data flows and user behavior.

Enforce process compliance

Reduce information security risks and comply with IT security standards and regulations by enforcing data use and handling policies that users can’t avoid following.

Minimize data loss and increase efficiency of data protection

Reduced complexity

Save the time and hassle associated with managing a DLP solution. Acronis DeviceLock DLP is easily deployable through Active Directory (AD) and offers various central management consoles, based on your organization’s requirements.

Centralized management
Native integration with Group Policy
Non-interruptive updates and upgrades

Increased productivity

Gain visibility over data protection and increase compliance with monitoring of end-users actions and data flows, as well as built-in reporting capabilities. Control costs for DLP cybersecurity by purchasing only the functionality you need.

User activity monitoring and log collection
Built-in log record viewers and reporting tools
Modular architecture to control total cost of ownership (TCO)

Improved data loss prevention

Minimize the risks related to insider threats. Allow only the legitimate operations necessary for business processes and block any unauthorized activities with enforced policies that users cannot bypass.

Control over data flows in local and network channels
Content analysis and filtering
Granular control over allowed legitimate actions and processes

Control costs with modular architecture

Acronis DeviceLock DLP is comprised of different modules that serve as complementary functional components with incremental licensing to protect data-in-use, data-in-motion, and data-at-rest. Only purchase the functionalities that your business needs for DLP security.

Acronis DeviceLock DLP - Endpoint DLP

Acronis DeviceLock Core

The fundamental, baseline component of Acronis DeviceLock Endpoint DLP to prevent leakage of data-in-use with context-aware controls over local data flows through ports, peripheral devices, and virtualized sessions.

Acronis DeviceLock NetworkLock add-on

Protect data-in-motion with controls over data access and transfer operations through network channels, based on the operation’s context.

Acronis DeviceLock ContentLock add-on

Prevent unauthorized usage and transmission of confidential data, even in images or unstructured data, through content-aware controls over both local and network channels.

Acronis DeviceLock User Activity Monitor add-on

Monitor end-user activity, keystrokes, and running processes on the endpoint based on DLP-related events for security investigations and auditing purposes.

Acronis DeviceLock Search Server add-on

Ease auditing, investigations, and forensic analysis with full-text searches in the central event and shadow log database, populated by Acronis DeviceLock DLP agents.

Acronis DeviceLock Discovery

A standalone product that reduce the risk of data loss with automatic discovery of exposed sensitive data at rest – protecting it with configurable remediation actions, alerting admins, logging, and reporting.

Data loss prevention for virtualized sessions

With Acronis DeviceLock DLP, you can bring data loss prevention capabilities to streamed desktops and applications, as well as local virtual machines on hypervisors. This way you can prevent data leaks in BYOD implementations based on remote virtualization. The DLP controls are enforced on the edge of the virtual platform to control data exchanges between the virtual workspace and the personal part of the BYOD device, its local peripherals, and the network.

Supported solutions
Microsoft RDS, Citrix XenDesktop, Citrix XenApp, VMware Horizon View, VMware Workstation, VMware Workstation Player, Oracle VM VirtualBox, Windows Virtual PC

Supported controls
Context-aware and content-aware controls, logging, data shadowing and alerting for thorough DLP security over virtualized sessions

No leakage of corporate data
IT retains complete control over virtual corporate environments on employees’ personal devices

Private data independency
Employees maintain full control over the device platform, personal applications, and their private data

Controlled workloads and channels

Endpoints: Windows PC, Mac, Windows server
Virtual: Guest Windows machines on Microsoft RDS, Windows Virtual PC, Citrix XenDesktop, Citrix XenApp, Citrix XenServer, VMware Horizon View, VMware Workstation, VMware Workstation Player, Oracle VM VirtualBox
Local channels: ports, peripheral, storage, and redirected devices, connected mobile devices, clipboard
Network channels: Emails, webmails, social networks, instant messengers, cloud storage web services, web search, career search, SMB file shares, P2P file sharing, Tor browser, network protocols, stateful IP firewall.

Architecture:

Function-based modular DLP solution architecture with incremental licensing

Acronis DeviceLock DLP is designed as a modular architecture of standalone products and built-in, add-on functional components whose capabilities complement each other. The management of all modules is unified and licensing for functional components other than Acronis DeviceLock Core is optional.

This architecture allows customers to purchase only those DLP functions they need and incrementally upgrade them over time as their data protection requirements evolve.

Modules

Acronis DeviceLock Core

The fundamental component of Acronis DeviceLock Endpoint DLP is DeviceLock Core, which can be used alone as the basic configuration of this product.

It granularly controls data access and transfer operations locally on protected endpoints, based on the operation’s context such as involved users, used channels, accessed/transferred data type, flow direction, date and time, etc. These context-aware controls govern user access to peripheral devices and ports, document printing, clipboard copy/paste operations, screenshot capturing, media format and eject operations, file type detection access controls, and synchronizations with locally connected mobile devices.

Integrated central management framework - Includes all central management and administration components of Acronis DeviceLock DLP.
Granular controls – Granularly controls local data flows, based on device class, user group, or unique device identifiers.
Connection-interface-independent – Detects the true device type and enforces context-aware controls based on it, regardless of the connection interface used.

Acronis DeviceLock NetworkLock

This optional add-on module to Acronis DeviceLock Core expands context-aware controls to network communications of protected endpoints.

Acronis DeviceLock NetworkLock controls network data flows through most risky applications and protocols. These include popular email platforms, webmails, instant messengers (IMs), cloud-based file storage, social media, web access, web search engines, local network shares, and torrent P2P file sharing, as well as FTP and Telnet protocols.

Deep packet inspection (DPI) – Application- and browser-independent controls over network communications via SMTP, HTTP/HTTPS, WebDAV, FTP, Telnet, and P2P file sharing to detect the protocol and application type regardless of the network ports they use.
Inspect encrypted traffic – The ability to inspect both plain and SSL-protected traffic allows you to enforce context-aware controls over a wider range of network data flows, as well as extract data transmitted in SSL-tunnels for further content inspection.
Stateful IP Firewall – Selectively filter network communications uncontrolled by Acronis DeviceLock NetworkLock’s DPI.

Acronis DeviceLock ContentLock

This add-on component expands the functions of Acronis DeviceLock Core and Acronis DeviceLock NetworkLock with content-aware controls over local and network channels.

Acronis DeviceLock ContentLock performs content inspection and filtering of files and other data objects used on or transferred from the protected computer to enforce controls based on the sensitivity of detected content. Acronis DeviceLock ContentLock can identify and inspect three general categories of content: textual data, binaries, and various data and metadata types.

Verified file type – Inspect a file’s binary content to reliably detect the actual file type regardless of its extension or file name, and enforce controls based on this information.
Universal content detection – Detect both structured textual data based on industry and contry-specific keyword dictionaries and regular expression patterns, as well as unstructured binary and textual content by using data fingerprinting.
Data classification support – Identify classification labels assigned to documents and files by Boldon James Classifier products. Automatically classify corporate data into pre-built or user-defined classification levels.

Acronis DeviceLock User Activity Monitor (UAM)

This optional add-on module to Acronis DeviceLock Core enables monitoring of end-users activities based on DLP-related events. UAM expands the evidence base for security incident investigations and simplifies the detection of suspicious user behavior and misuse of access privileges.

Acronis DeviceLock User Activity Monitor records the user’s computer screen together with on-screen actions, keystrokes, and information about applications that were used on the computer during recording. UAM logs are automatically collected to the central DLP log database. Security administrators can use built-in tools for viewing and analyzing UAM logs both locally at the endpoint and in the central log database.

Configurable recording rules – Recording of end-user activity can be triggered or stopped based on system state parameters or DLP events. Independent UAM policies can be configured for endpoints on the corporate network and ones that are offline or off-site.
Centralized log collection – UAM logs are automatically collected in the central storage database. A maximal log size can be defined with various override options and a configurable storage duration.
Built-in UAM log viewers – View and analyze recorded UAM sessions both locally at the endpoint and centrally on the log server by using integrated log viewers with a video player for screen recordings, keystroke viewer, and process viewer.

Acronis DeviceLock Discovery

A standalone product that scans corporate endpoints, network attached storage systems, file shares, and Elasticsearch databases to locate exposed sensitive content stored at the wrong places and protect it with automatic, configurable remediation actions and alerts to IT security administrators and SIEM systems. Acronis DeviceLock Discovery enables organizations to gain visibility and control over confidential “data-at-rest” stored across their IT environment to proactively prevent data breaches and help achieve compliance with regulatory and corporate data security requirements.

Acronis DeviceLock Search Server

An optional, standalone post-analysis component – Acronis DeviceLock Search Server (DLSS) can be used to perform full-text searches in the central audit log database, shadow log, and file repository populated with data by Acronis DeviceLock agents. Acronis DLSS is aimed at making the labor-intensive processes of log analysis during information security audits and incident investigations much faster and more accurate.

Features:

Modules

Acronis DeviceLock Core

Devices access control

Ensure there’s no leakage of data through local channels by controlling which users or groups can access ports, peripheral, storage, redirected, and mobile devices. Access controls can be enforced depending on the time of day and day of the week.

Acronis DeviceLock NetworkLock

Network communications control

Prevent data leakage via network communications of Windows endpoints with context-aware controls. Increase business process compliance by enforcing controls over both plain and SSL-encrypted traffic.

Acronis DeviceLock ContentLock

Content detection

Have a thorough control over transferred or accessed content with content detection based on pre-built templates of Regular Expression (RegExp) patterns and industry-specific keyword filters (HIPAA, PCI, etc.) for structured data, and data fingerprinting for unstructured data. Data fingerprints are categorized based on their respective data classifications with certain levels of importance.

No data leaks missed

Clipboard control

Block data leaks at their earliest stage – when data is transferred between applications and documents. Control user access to objects of different data types copied into the clipboard (even for redirected BYOD devices) and filter textual data with content-aware DLP policies.

Screen capturing control

Prevent data theft by blocking screenshot operations via Windows PrintScreen or screen capturing features of third-party apps for certain users or groups. Textual data in captured screen images can be extracted and filtered according to content-aware DLP policies.

True file type control

Acronis DeviceLock DLP looks into a file’s binary content to determine its true type, regardless of file name and extension. This can control access to over 5,300 file types for removable media, as a part of content analysis, or for pre-filtering of shadow copies to reduce the volume of captured data.

Gain deeper visibility and control over data protection

Acronis DeviceLock Discovery

Content discovery

Proactively prevent data breaches and improve regulatory compliance with visibility and control over confidential data-at-rest. Automatically scan data-at-rest in the organization’s IT environment to locate exposed sensitive content and enforce a set of configurable automatic remediation options along with real-time alerts.

Acronis DeviceLock UAM

User activity monitoring

Enhance incident investigation and information security auditing capabilities by recording user’s on-screen activities, keystrokes, and information about running applications. User activity monitoring is triggered based on a system state or DLP events with independent policies for endpoints used both online and offline.

Powerful content-aware controls

Content filtering

Protect sensitive content from leaking by analyzing and filtering the textual and binary content of data accessed or transferred via local and network channels. Content filtering also recognizes and uses classification labels assigned to documents and files by Boldon James Classifier products.

Optical character recognition (OCR)

Prevent leakage of sensitive data in a graphical format with a built-in OCR engine can extract and inspect pieces of text from more than 30 graphical formats in more than 30 recognized languages – even for endpoints outside the corporate network. Reduce the network load with a distributed OCR architecture.

True file type control

Centralized management and deployment

Ease the labor-intensive and resource-consuming processes of DLP deployment and managment by choosing from a flexible set of central management consoles with the same UI. Depending on the organization’s IT environment, SMBs or large enterprises can choose the console that best fit their needs.

Active Directory integration
Cut learning times and administrative efforts with a console based on the custom Acronis DeviceLock MMC snap-in to the Microsoft Group Policy Management Console used as the Active Directory Group Policy interface. This native integration enables Acronis DeviceLock DLP agents to be deployed and fully managed via Group Policies.

Non Active Directory environments
In non-AD environments, administration is done through Acronis DeviceLock Enterprise Manager, a native Windows app that runs on a separate computer. DLP policies are delivered to all agents (pushed or pulled) via Acronis DeviceLock Enterprise Server (DLES).

Directory-less installations
In such IT environments, e.g. in a Windows for Workgroups network, as well as for managing Acronis DeviceLock Discovery, the custom Acronis DeviceLock MMC snap-in can be used to remotely manage agents on per-endpoint basis.

Proactive protection

Tamper protection

Enforce process compliance by preventing tampering with DLP policy settings locally on protected endpoints, even by users with local system administrator privileges. Only designated Acronis DeviceLock DLP administrators can uninstall or upgrade the agent, or modify DLP policies.

Printing security

Control network and local printing from Windows endpoints by enforcing DLP policies over user access and content of printed documents for network, local, and virtual printers. Ensure higher data security by intercepting and inspecting print spooling operations, allowlisting of USB-connected printers, and print data shadowing.

Network-awareness

Administrators can define different online vs. offline DLP policies for the same user or user group. A reasonable and often necessary setting on a mobile user’s laptop, for example, is to disable Wi-Fi when docked to the corporate network and enable it when undocked.

Allowlisting

Allow granular controls over data access and transfer operations with the ability to manage exclusions to general DLP rules through wide allowlisting capabilities.

USB allowlist
Allows administrators to authorize a specific model of devices or particular device, distinguished by a unique identifier such as a serial number, to access the USB port, while locking out all other devices.

Media allowlist
Ease the distribution of authorized software by authorizing the use of specific DVD, BD, and CD-ROM disks, uniquely identified by data signature. Granularly control authorized users and groups that can access them.

Temporary USB allowlist
For using USB devices on endpoints working out of the corporate network, a temporary access to a USB-connected device can be provided by issuing an access code delivered to the user out of-band, rather than through regular Acronis DeviceLock DLP permissions procedures.

Protocols allowlist
Allowlist specific network communications and define whether content-aware rules to be applied to thembased on IP address, address range, subnet masks, network ports and their ranges, network protocols and applications, SSL-protected traffic, web resources (URLs), sender or recipient email addresses and identifiers in IMs.

Reporting

To ease information security auditing and compliance reporting and gain deeper visibility into data flows and data protection, Acronis DeviceLock DLP offers a wide choice of reporting capabilities.

Graphical reports - based on audit and shadow logs.

Permission reports - display permissions and audit rules set on all endpoints across the network.

Plug-and-play device reports - display USB, FireWire, and PCMCIA devices currently or historically connected to endpoints in the network.

User Dossiers reports - presents a collection of end-user action statistics in a graphical format in a single user card, pressenting user behavioral analysis with "loyalty" index, and communication flows. The information is automatically updated on a schedule or during low server load periods.

Comprehensive log collection for increased visibility

Auditing

Track user and file activities for specified device types, ports, and network resources on a computer and collect logs with GMT timestamps centrally in a Microsoft SQL or Postgres database. Pre-filter audit activities by event and context. Audit logs can be exported to many standard file formats for use in other reporting tools.

Data shadowing

Enable security compliance auditing, incident investigations, and cyber forensics by mirroring data transferred without authorization via local and network channels. Leverage data shadowing that’s triggered based on operations context and content. Pre-filter shadow activities for network load balancing.

Monitoring

Monitor remote computers in real-time with Acronis DLES, checking agents’ status, policy consistency, and policy integrity and writing information to the monitoring log. Define a master policy to be applied across selected remote computers in the event that their current DLP policies are out-of-date or damaged.

Acronis DeviceLock Search Server

Full-text search in log database

Ease compliance and security auditing with full-text searching in shadow and event log data in Acronis DLES. Full-text searching is especially useful for searching shadow copes of documents based on their content. Acronis DeviceLock Search Server can run searches by schedule and send search results via email.

Anti-keylogger

Prevent credentials and data leakage by detecting USB keyloggers and blocking their activities. Acronis DeviceLock DLP obfuscates PS/2 keyboard input and forces PS/2 keyloggers to record random entries instead of the real keystrokes.

RSoP support

Increase visibility into data security by using the Windows standard Resultant Set of Policy (RSoP) snap-in to view the DLP policies currently being applied, as well as to predict what policies would be applied in a given situation.

Traffic shaping

Reduce network load with a Quality of Service (QoS) feature that allows to define bandwidth limits for sending audit and shadow logs from Acronis DeviceLock Agents to Acronis DeviceLock Enterprise Server.

Stream compression

Decrease the size of data transfers and reduce network load with an ability to compress audit logs and shadow data pulled from endpoints by Acronis DeviceLock Enterprise Server service.

Optimal server selection

For optimal transfer of audit and shadow logs to the central log database, Acronis DeviceLock agents can automatically choose the fastest available Acronis DeviceLock Enterprise Server from a set of available servers.

System Requirements:

Version information and system requirements

Version

9.0 (Build 93110)

Management consoles

Windows XP / Vista / 7 / 8 / 8.1 / 10 / Server 2003-2022 (32/64-bit) CPU Pentium 4, 512MB RAM, HDD 1GB

Agents

Windows XP / Vista / 7 / 8 / 8.1 / 10 / 11 (up to 23H2) / Server 2003-2022 (32/64-bit)
Apple macOS 10.15 -11.2.3 (32/64-bit)
Microsoft RDS, Citrix XenDesktop / XenApp, Citrix XenServer, VMware Horizon View
VMware Workstation, VMware Player, Oracle VM VirtualBox, Windows Virtual PC
CPU Pentium 4, 512MB RAM, HDD 400MB

Acronis DeviceLock Enterprise Server, Acronis DeviceLock Discovery Server, Acronis DeviceLock Search Server

Windows Server 2003-2022 (32/64-bit), Microsoft RDS, Citrix XenServer, VMware vSphere Desktop
2xCPU Intel Xeon Quad-Core 2.33GHz, RAM 8GB, HDD 800GB (if hosting SQL DB, less if not)
SQL Express / MS SQL Server 2005-2017 or PostgreSQL 9.5 and newer

Device types controlled

Windows

Removable storage (flash drives, memory cards, PC Cards, eSATA, etc.), CD-ROM/DVD/BD, floppies, hard drives, tapes, Wi-Fi and Bluetooth adapters, Apple iPhone/iPod touch/ iPad, Windows Mobile, Palm OS, BlackBerry, MTP-enabled devices (such as Android and Windows Phone), printers (local, network and virtual), modems, scanners, cameras

Mac

Removable storage, hard drives, CD/DVD/BD, Wi-Fi, and Bluetooth adapters

Session terminal/BYOD

Mapped drives (removable, optical, hard), USB devices

Ports secured

Windows

USB, FireWire, Infrared, Serial, Parallel

Mac

USB, FireWire, Serial

Session terminal/BYOD

USB, Serial

Clipboard control

Between applications

Inter-application clipboard copy/paste operations

Windows

Data transfers between Windows and desktop/application session clipboards

Controlled data types

Files, textual data, images, audio, unidentified data with text content filtering

Screenshot operations

PrintScreen and third-party applications

Virtualized sessions

Copy operations between host and guest OS clipboards

Network communications controlled

Email

SMTP/SMTPS, Microsoft Outlook (MAPI), IBM Notes

Instant messengers

Skype/Skype for Web/Skype for Business/Microsoft Lync 2013, ICQ Messenger, Zoom, Viber, IRC, Jabber, Windows Messenger, Mail.ru Agent, WhatsApp, Telegram

Career search

CareerBuilder, College Recruiter, craigslist, Dice, Glassdoor, GovernmentJobs, HeadHunter.com, Hired, Indeed, JobisJob, Mediabistro, Monster, Simply Hired, Ladders, us.jobs, USAJOBS, ZipRecruiter, Rabota.ru, Yandex.Rabota, SuperJob.ru, hh.ru, Avito.ru

Webmail

AOL Mail, Gmail, Hotmail/Outlook.com, GMX.de, Web.de, T-online.de, freenet.de, Yahoo! Mail, Mail.ru, Rambler Mail, Yandex Mail, Outlook Web App/Access (OWA), NAVER, ABV Mail, Zimbra Collaboration, Google Workspace Sync for Microsoft Outlook (G-Suite)

Cloud file sharing web services

Amazon S3, Dropbox, Box, Google Docs/Google Drive, OneDrive, iCloud, GMX.de, Web.de, MagentaCLOUD, freenet.de, Cloud Mail.ru, Yandex.Disk, Sendspace, MediaFire, WeTransfer, 4shared, GitHub, MEGA, AnonFile, dmca.gripe, DropMeFiles, Easyupload.io, Files.fm, Gofile.io, transfer.sh, TransFiles.ru, Uploadfiles.io

Internet protocols

HTTP/HTTPS, FTP/FTPS, Telnet

Social networking

Facebook, Twitter, Google+, LinkedIn, Tumblr, Instagram, Pinterest, MySpace, Vkontakte, XING.com, LiveJournal, MeinVZ.de, StudiVZ.de, Disqus, LiveInternet.ru, Odnoklassniki.ru Web search Google, Yandex, Bing, Baidu, Yahoo, Mail.Ru, Ask.com, AOL Search, Rambler, Wolfram Alpha, DuckDuckGo, WebCrawler, Search.com, Wayback Machine, Dogpile, StartPage, Excite, NAVER, Web.de Other SMB shares, Skype Private Conversations, Skype media calls, Zoom meetings, Torrent, Tor Browser traffic

Content-aware controls

Controlled channels

Storage devices (removable, floppy, optical CD/DVD/BD drives), printers (local, network, virtual), Windows clipboard, redirected mapped drives and clipboard of terminals/BYOD devices, network communications (email, webmail, IM, social networks, cloud file sharing services, web searches, career search requests , HTTP/HTTPS, FTP/FTPS, SMB)

Binary data detection methods

Data fingerprints

Content-aware data shadowing

For controlled channels and content types

Content types controlled

Textual content, binary data, data types

Textual content detection methods

Keyword dictionaries (160+ prebuilt, user-configurable) with morphological analysis (English, French, German, Italian, Russian, Spanish, Catalan Spanish, Portuguese, Polish), RegExp templates (90+ prebuilt, user-configurable), data fingerprints (partial/exact document matching) within Data Classifications

OCR Features

Endpoint-resident OCR processing, 30+ languages, integrated DeviceLock keyword dictionaries and regular expressions, rotated/mirrored/inverted images

Textual content objects

Parsable file formats (100+) and archives (40+), textual data (in emails, messages, web forms, etc.), images (OCR processing), unidentified binary data, data objects classified by Boldon James Classifier

Controlled data types

Verified file types (5300+), file/document properties, embedded image properties, clipboard data types (files, textual data, images, audio, unidentified), sync protocol objects (Microsoft ActiveSync®, WMDC, Apple iTunes®, Palm® HotSync), data objects classified by Boldon James Classifier

Frequently Asked Questions:

There are two different sets of DLP policies, Regular and Offline, which are automatically applied to a controlled endpoint by Acronis DeviceLock DLP agents depending on its network status. The Offline policy can be triggered by the laptop using either cached or confirmed Windows credential authentication, whether it can connect to any of its known Acronis DeviceLock Enterprise Servers, or if in a wired vs. unwired state.

Yes, Acronis DeviceLock DLP is capable of functioning in any administrator set mode. We also call this “observation mode”.

In cases where access to ports, devices, or network protocols is not blocked or content-filtered by policy, logging and data shadowing policy can be actively logging and keeping records in audit and shadow logs in “passive mode”.

If there is a restrictive access policy active, Acronis’ DLP solution blocks the transfer and prevents data leakage on a controlled endpoint in real time.

Yes, there is. Acronis DeviceLock DLP supports various on- and off-corporate-line security policies. This way you can have one policy when the laptop is behind the firewall or DMZ and a totally different policy when the laptop is out in the wild, strengthening DLP security.

First off, Acronis DeviceLock DLP is a best-of-breed enterprise data loss prevention solution (enterprise DLP solution) that is designed exclusively to prevent data leakage at the endpoint layer. It is not an appliance, antivirus, or limited module that you might find in other “endpoint security” protection suites.

Acronis DeviceLock DLP has no required hardware elements that wouldn’t already be in place, which significantly reduces the typical costs of implementation and maintenance.

Historically, Acronis DeviceLock DLP evolved as a solution with every necessary feature to prevent data leakage through peripheral devices and ports. Now, compared to competitive port-device control solutions, Acronis DeviceLock DLP has the most features to meet the challenge. Acronis NetworkLock and Acronis ContentLock add-on components advanced the product into the class of fully-featured enterprise DLP solutions by incorporating the most commonly used network channels using the most effective techniques of content analysis and filtering.

With the integration of the user activity monitor in Acronis DeviceLock in 2020, the solution implements another differentiating feature – allowing you to record user on-screen actions, keystrokes, and running processed, based on DLP-related events.

The ability to try the solution before buying it is another important competitive distinction of Acronis DeviceLock DLP. Having nothing to conceal from existing and potential customers, we stick to the principle of total transparency by providing a freely available trial version for 30 days.

Another important distinction of Acronis DeviceLock DLP is the host-resident optical character recognition (OCR), which allows for more thorough content-aware controls not only in network, but also in local channels and for endpoints outside the corporate network.

Moreover, for network communications, Acronis DeviceLock DLP is the only DLP solution that employs deep packet inspection (DPI) with an universal-application, and web browser-independent controls of user communications via most network protocols and applications. These include SMTP, HTTP/HTTPS, WebDAV, FTP(S), Telnet, as well as Torrent-based P2P file sharing. NetworkLock uses this DPI technology to detect the protocol and application type regardless of the network ports they use.

Another advantage of Acronis DeviceLock DLP is that all modules are pre-integrated and deployed “sight unseen” with the core platform with module-based licensing that allows for the ability to phase desired modules of the DLP solution into the environment when ready by simply turning licensing on and configuring settings. This reduces the costs and labor contribution to both the initial rollout and ongoing maintenance.

There are two server components in the suite: Acronis DeviceLock Enterprise Server (DLES) and Acronis DeviceLock Content Security Server, and both require a Microsoft SQL or SQL Express database. They are referred to as “server” components as they generally need to run on Windows server class operating systems due to the concurrent connection limitations of workstation class clients. They can be hosted on virtual servers or piggyback on existing servers that have available user-connection bandwidth during the day (“backup”, “staging”, “patch” servers, etc.).

The Acronis DeviceLock Enterprise Server component is not critical to administration and is only necessary if the customer intends to centrally aggregate audit and shadow data for reporting and forensic analysis. In mid-to-large size environments, generally there would be multiple DLES agents used for performing the collection tasks efficiently. The server module does not perform any endpoint management tasks (Acronis DeviceLock DLP agents receive the access control policies either via Active Directory Group Policy GPOs, or directly from DeviceLock administrative consoles), nor does it store DLP policy settings.

The customer does not need to purchase licenses for the Acronis DeviceLock Enterprise Server component, as it is included with the Acronis DeviceLock Core module licensing that is tied to the number of endpoints being managed. The server can be installed and used in any number of instances required for efficient collection of audit and shadow data. Acronis DeviceLock DLP agents can have audit data and shadow copies pulled back by any number of Acronis DeviceLock Enterprise Servers to the back-end SQL and folder repository. Traffic optimization with stream compression, fastest server response history, and quality of service settings is included.

The Acronis DeviceLock Content Security Server is an additional component used to perform other security reporting related tasks. There is one server function – Acronis DeviceLock Search Server-DLSS – included now, and more coming.

The Acronis DeviceLock Search Server provides full-text indexing and search of logged data and shadow files collected by the Acronis DeviceLock Enterprise Servers and placed in the common Microsoft SQL/SQL Express and folder repository. These search capabilities make it easier and more efficient to manage the increasing amount of data in Acronis DeviceLock Enterprise Server databases to validate and/or assist in tuning security policies.

The Acronis Search Server can automatically detect, index, find and display documents of many formats including Adobe Acrobat (PDF), Ami Pro, archives (GZIP, RAR, ZIP), Lotus 1-2-3, Microsoft Access, Microsoft Excel, Microsoft PowerPoint, Microsoft Word, Microsoft Works, OpenOffice, Quattro Pro, WordPerfect, WordStar and many more.

Note that in most cases, the customer does need to purchase a separate license to use the Search Server component. Licensing is based on the desired maximum number of searchable documents and log entries.

Documentation:

Download the Acronis DeviceLock DLP Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.
This product is available as instant electronic delivery upon purchase.
Acronis Advantage Premier - Offers 24 x 7 support services available via phone, chat, and email. Acronis Advantage Premier customers receive priority support in the event of a business-critical system error (severity A), customers will receive the initial response within one hour. The first year of service is included with the Acronis line of corporate products.

Acronis Products

Acronis DeviceLock DLP License

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAALAENS11
Our Price: $59.85

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAALBENS11
Our Price: $43.70

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAALCENS11
Our Price: $34.20

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAALDENS11
Our Price: $25.65

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAALEENS11
Our Price: $20.90

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAALFENS11
Our Price: $19.00

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAALGENS11
Our Price: $17.10

Acronis DeviceLock Endpoint DLP License includes 1 year Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAALHENS11
Our Price: $14.73

Acronis DeviceLock DLP Upgrade

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAAU1ENS11
Our Price: $41.90

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAAU2ENS11
Our Price: $30.59

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAAU3ENS11
Our Price: $23.94

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAAU4ENS11
Our Price: $17.96

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAAU5ENS11
Our Price: $14.63

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAAU6ENS11
Our Price: $13.30

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAAU7ENS11
Our Price: $11.97

Acronis DeviceLock Endpoint DLP Upgrade License includes 1 year Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAAU8ENS11
Our Price: $10.31

Acronis DeviceLock Maintenance/Support Only

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAAM1ENS11
Our Price: $17.96

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAAM2ENS11
Our Price: $13.11

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAAM3ENS11
Our Price: $10.26

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAAM4ENS11
Our Price: $7.70

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAAM5ENS11
Our Price: $6.27

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAAM6ENS11
Our Price: $5.70

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAAM7ENS11
Our Price: $5.13

Acronis DeviceLock Endpoint DLP License - Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAAM8ENS11
Our Price: $4.42

Acronis DeviceLock Maintenance/Support Only (Renewal)

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAAR1ENS11
Our Price: $17.96

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAAS1ENS11
Our Price: $33.52

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 5-49 Endpoints ESD

#DLAAP1ENS11
Our Price: $44.29

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAAR2ENS11
Our Price: $13.11

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAAS2ENS11
Our Price: $24.47

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 50-199 Endpoints ESD

#DLAAP2ENS11
Our Price: $32.34

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAAR3ENS11
Our Price: $10.26

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAAS3ENS11
Our Price: $19.15

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 200-499 Endpoints ESD

#DLAAP3ENS11
Our Price: $25.31

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAAR4ENS11
Our Price: $7.70

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAAS4ENS11
Our Price: $14.36

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 500-999 Endpoints ESD

#DLAAP4ENS11
Our Price: $18.98

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAAR5ENS11
Our Price: $6.27

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAAS5ENS11
Our Price: $11.70

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 1000-2499 Endpoints ESD

#DLAAP5ENS11
Our Price: $15.47

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAAR6ENS11
Our Price: $5.70

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAAS6ENS11
Our Price: $10.64

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 2500-4999 Endpoints ESD

#DLAAP6ENS11
Our Price: $14.06

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAAR7ENS11
Our Price: $5.13

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAAS7ENS11
Our Price: $9.58

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 5000-9999 Endpoints ESD

#DLAAP7ENS11
Our Price: $12.65

Acronis DeviceLock Endpoint DLP License - Renewal Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAAR8ENS11
Our Price: $4.42

Acronis DeviceLock Endpoint DLP License - 2 Year Renewal Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAAS8ENS11
Our Price: $8.25

Acronis DeviceLock Endpoint DLP License - 3 Year Renewal Acronis Maintenance and Support, 10000+ Endpoints ESD

#DLAAP8ENS11
Our Price: $10.90

Acronis DeviceLock DLP

Stop data leaks at the source with complete endpoint data loss prevention (DLP)

Overview:

An enterprise DLP that’s easy to learn, deploy, and manage

Minimize insider threats

Gain visibility into data protection

Enforce process compliance

Minimize data loss and increase efficiency of data protection

Reduced complexity

Increased productivity

Improved data loss prevention

Control costs with modular architecture

Acronis DeviceLock DLP - Endpoint DLP

Acronis DeviceLock Core

Acronis DeviceLock NetworkLock add-on

Acronis DeviceLock ContentLock add-on

Acronis DeviceLock User Activity Monitor add-on

Acronis DeviceLock Search Server add-on

Acronis DeviceLock Discovery

Data loss prevention for virtualized sessions

Controlled workloads and channels

Architecture:

Function-based modular DLP solution architecture with incremental licensing

Modules

Acronis DeviceLock Core

Acronis DeviceLock NetworkLock

Acronis DeviceLock ContentLock

Acronis DeviceLock User Activity Monitor (UAM)

Acronis DeviceLock Discovery

Acronis DeviceLock Search Server

Features:

Modules

Acronis DeviceLock Core

Devices access control

Acronis DeviceLock NetworkLock

Network communications control

Acronis DeviceLock ContentLock

Content detection

No data leaks missed

Gain deeper visibility and control over data protection

Acronis DeviceLock Discovery

Content discovery

Acronis DeviceLock UAM

User activity monitoring

Powerful content-aware controls

Centralized management and deployment

Proactive protection

Allowlisting

Reporting

Comprehensive log collection for increased visibility

Acronis DeviceLock Search Server

Full-text search in log database

System Requirements:

Version information and system requirements

Device types controlled

Ports secured

Clipboard control

Network communications controlled

Content-aware controls

Frequently Asked Questions:

Can Acronis DeviceLock DLP function without internet connection?

Is Acronis DeviceLock DLP capable of “passive mode” functioning, i.e. not restricting data transfer, but logging and shadow copying?

Is there an option to configure various access control policies for laptops in- and out of the corporate network?

What is the critical distinction between Acronis DeviceLock DLP and other competitive DLP solutions?

Is there a server component of Acronis DeviceLock DLP and what does it serve as?

Documentation: