Mimecast Data Leak Prevention vs Trellix Data Loss Prevention

Mimecast Data Leak Prevention is a cloud-based email control service for organizations seeking to limit accidental or deliberate exposure of sensitive information. It scans headers, subject lines, message bodies, HTML, and attachments for text patterns, words, file hashes, dictionaries, and inappropriate images. Administrators manage granular policies for users and groups in a web console. When a rule triggers, they can block a message, hold it for review, copy it to a group, send it securely, or add content such as a disclaimer. Suspected leaks can be routed through Secure Messaging, and policy-based TLS encryption can protect email in transit. Mimecast describes integration with Microsoft Exchange or Office 365; listed mail environments also include Microsoft 365, Google Workspace, and on-premises or hybrid email. The service can remove hidden Word document metadata such as comments and tracked changes. Mimecast says its policies can support PCI-DSS, HIPAA, and GLBA compliance work. Pricing is on request, with no numeric price or billing term listed for this product.

Trellix Data Loss Prevention helps organizations discover and classify sensitive information, enforce policies across data-loss channels, identify inappropriate activity, and support remediation. Its coverage spans endpoints, email, the web, networks, and data storage. A unified console handles policy administration, event detection, and reporting, with deployment available on-premises or as SaaS. DLP Endpoint Complete protects Windows and macOS workstations and servers with discovery, classification, content filtering, monitoring, blocking, user coaching, and compliance reporting. Discover locates and classifies information across networks and file repositories, while Network Monitor detects network events in real time and Network Prevent helps prevent unauthorized sharing across networks, email, and the web. Optical character recognition is available for Discover, Network Monitor, and Network Prevent. Policy and reporting options map to common compliance frameworks, and the open architecture supports third-party SIEM and SOAR integrations. Browser content inspection is limited to DLP Endpoint Complete customers on Windows with version 11.14 or higher and may need additional cloud-console setup. Pricing is on request.