Major New Features
De-Identification for Semi-Structured and Unstructured Data
DSPM’s data de-identification (DID) feature for unstructured data stores is now generally-available for services such as SMB. This functionality compliments structured de-identification, which was made available in the prior release.
For supported semi-structured file types, data security administrators can now:
- Configure and manage de-identification rules in association with pre-defined Entity Data Types (EDTs)
- With either the UI or Open API, take bulk de-identification actions on individual files
- Report on corrected violation counts and logged activity, and export results to CSV for de-identification tracking activities within the business
Sidecar Auto-Upgrade
As an extension of the Ideal Onboarding Experience initiative, standalone sidecars now support automatic and on-demand upgrades (previously available only for the single appliance). This release includes both a UI and API resources for triggering and monitoring sidecar upgrades, along with sharing a regular upgrade cadence with the one defined for their DLP appliance.
Improvements and Updates
Single Appliance Multi-Cloud Terraform Support
Continuing last release’s AWS-only CloudFormation/Terraform work, this release adds Terraform templates for deploying the single appliance sidecar on both Azure and GCP. You can access these templates directly from DSPM’s Sidecar Administration UI.
Improved Scan Status & Progress Visibility
The Connected Data Store screen now surfaces information which users can leverage to see the scan is actively working, roughly how far along it is, or when to expect it next.
Specifically, the scan status tooltip (displayed when hovering over the status indicator) will now communicate the following:
- The next scheduled scan start time
- More-descriptive scan statuses that now progress thru clear phase, such as “Indexing files (1,240,000 so far)” or “Start Scan in Progress”
Windows Authentication as a SQL Server Authentication Option
In addition to their existing options, Microsoft SQL Server data stores now permit you to authenticated using Windows Authentication. For customers who have disabled local SQL accounts as a security measure, this allows DSPM to connect with your SQL Server data stores. In addition, Windows Authentication is means for leveraging Kerberos network authentication.