Comparativo Dlp

Research
G00213871

10 August 2011

Magic Quadrant for Content-Aware Data Loss
Prevention
Eric Ouellet, Rob McMillan

The enterprise content-aware data loss prevention market has gone
through a significant shift. Vendor consolidation has slowed, and the
market has bifurcated into high-end enterprise capabilities and lowend channel capabilities, offering more choices to organizations ofall
sizes and needs.

What You Need to Know
This document was revised on 12 September 2011. For more information, see the Corrections page
on gartner.com.
The market for content-aware DLP continues to grow at more than 20% year over year. Organizations
seeking content-aware capabilities to address sensitive data have more options in 2011 than ever
before, with three main categories ofofferings being marketed by vendors:
■

Enterprise DLP solutions (the focus of this Magic Quadrant), which provide organizations with
advanced content-aware inspection capabilities and robust management consoles

■

Channel DLP, which consists of content-aware DLP capabilities that are integrated within an
existing application — typically email

■

DLP-lite, a new subcategory ofofferings that group a specific set of capabilities in a way that
addresses a niche market typically by requirement, such as discovery only, or for a specific use
case, such as small or midsize business (SMB), where a need may exist to monitor only a few
protocols and provide a simplified management console or workflow

Commoditization Continues
The commoditization of endpoint products continues;however, the pace has slowed down
dramatically during the past 12 months, resulting in more price robustness than previously witnessed.
Specifically, endpoint solutions quickly went from $150 to $200 per endpoint to $50 to $80 per
endpoint during the past few years. In the past 12 months, endpoint solutions have stabilized in the
$35 to $60 range, depending on configuration options. The rise ofcontent-aware functions in many
traditional security and infrastructure products continues to increase its pace (see the DLP-lite
channel comments above).

1-16XZCGC

The integration of identity awareness in traditional DLP products is also continuing, however, at a less brisk pace.
Email boundary security, secure Web gateways (SWGs) and endpoint protection platforms continue to bereleased by vendors with increased DLP capabilities. In many cases, the limited DLP feature set in these channelspecific solutions (C-DLP) or in DLP-lite offerings is sufficient to solve near-term business requirements for DLP
— specifically when they relate to basic regulatory compliance requirements. Gartner projects that the majority of
organizations (approximately 70%) may be able to deploy "goodenough" DLP capabilities in evolving channelspecific or DLP-lite solutions by 2013 to satisfy government regulations with respect to private and sensitive
data, and for the automated application of protection mechanisms, such as the encryption of email and the
storage of sensitive content to USB and other removable storage media or portable devices.
There was no additional market consolidationin the past 12 months, with the exception of a significant
investment by Blue Coat in Code Green Networks, resulting in a private-label OEM. The larger vendors that made
acquisitions in past years were focused on integrating DLP features into more of the products in their portfolios in
the hope of creating the "content-aware enterprise" — a state where an ever-expanding breadth of solutionsdeployed within an organization is capable of identifying content, understanding the context of its use and
applying DLP rules. This results in a better security and regulatory posture, as well as overall increased
awareness and risk profiling.
Large vendors were nearly always seen offering DLP as part of an enterprise product renewal, such as antivirus,
SWGs and email hygiene. Many of the...