- System requirements
- Minimum privileges required
- Default port configuration
- Installing DataSecurity Plus
- Uninstalling DataSecurity Plus
- Starting DataSecurity Plus
- Launching DataSecurity Plus
- Configuring your solution
- Licensing details
- Applying a license
- About File Auditing
Setting up File Audit
- About File Analysis
Setting up File Analysis
Data Risk Assessment
- About Data risk assessment
Setting up Data risk assessment
- About Endpoint DLP
Setting up Endpoint DLP
- About Cloud Protection
- Gateway Server Configuration
- Certificate Authority Configuration
- Gateway Configuration in Endpoint
- Manage Certificate Trust Store
- Threat Analytics Database
- Manage Banned Applications
- Manage Authorized Applications
- Gateway Server Failover
- Cloud Access Reports
- Application Insights
- Shadow Cloud Application Reports
- Banned Cloud Application Reports
- File Upload Reports
Setting up Cloud Protection
- Technician configuration
- Email configuration
- Notification filters
- Manage agent
- SIEM integration
- Business hours configuration
- Two-factor authentication
- Workgroup configuration
- Security policy
- Agent document
- How to Migrate/Move DataSecurity Plus
- How to apply SSL certificate
- How to automate DataSecurity Plus database backup
- How to set alerts in DataSecurity Plus
Gateway server failover measures in DataSecurity Plus
DataSecurity Plus' Cloud Protection gateway server monitors web traffic to and from endpoints; data is sent to the DataSecurity Plus server, which is then translated into reports and graphs. Cloud Protection offers built-in measures to prevent gateway server failure in the following scenarios:
- Low disk space in the DataSecurity Plus server: Admins can enable email notifications to get alerts when the disk space in DataSecurity Plus is lower than the limit configured in the Admin console. Admins also have the option to stop event data collection to prevent memory overload. The audit data for Cloud Protection will be stored temporarily in the gateway server.
- Low disk space in the gateway server: When free space in the server is lower than 2GB, auditing of web requests will be stopped to allow uninterrupted functioning of the gateway server.
- DataSecurity Plus server is inactive: When the DataSecurity Plus server is being upgraded or is unavailable, the gateway server agent will still function to ensure uninterrupted internet access.
- Communication failure between the DataSecurity Plus server and gateway server: When the DataSecurity Plus server is unable to communicate with the gateway server, the gateway server will still function to allow uninterrupted internet access. The audit data however, will be reflected in the reports and dashboard only after communication has been reestablished.
How to prevent gateway server failure
Gateway servers can be configured to prevent interruptions in access to the internet. When setting up proxy servers, you can configure Proxy Auto-Configuration (PAC) files out of the various methods used to route web traffic. Find more details on configuring PAC files here.
Recommended practices for preventing gateway server failure
- Set up at least three or more gateway servers to ensure uninterrupted internet access.
- When configuring the PAC file, ensure that intranet traffic is set up differently than the web request passing through the internet.
- Ensure that all endpoints have the PAC file setup enforced properly through Group Policy.
- Ensure that only browsers that support PAC file configuration are used in endpoints.
- While scheduling gateway server or DataSecurity Plus server maintenance, ensure that you have another gateway server available for failover.