DLP solution
Netwrix Endpoint Protector
Netwrix Endpoint Protector is a cross-platform DLP solution for small, medium and large enterprises that provides:
- USB & peripheral port control
- Scanning data in motion & at rest
- Encryption
Get Netwrix Endpoint Protector Demo
Since entering the market in 2008, it has received numerous awards, including the Gartner Magic Quadrant in the Endpoint Protector Solutions category in February 2017, was named a leader by G2 among DLP solutions in 2025, and in 2025, it received its 10th consecutive Cybersecurity Excellence Award as the best DLP solution.
Available modules
Content Aware Protection
Scanning data in motion.
Monitoring, detailed control and blocking of file transfers. Content and context tracking.
DeviceControl
USB & peripheral port control
Lock, monitor, and manage devices based on vendor ID, product ID, serial number, etc.
eDiscovery
Scanning data at rest
Detect, encrypt, and delete sensitive data. Detailed control of content and context with manual or automatic scanning.
Enforced Encryption
Enforced encryption of USB devices.
Encrypts, manages and protects USB devices with a password. Easy to use and effective module.
Deployment options
Virtual machine
This enables the appliance to be imported into VMware or Hyper-V. The image templates come preconfigured with dynamically allocated disk space, CPU cores, and RAM.
Cloud services
Netwrix provides image templates for GCP, AWS, and Azure, enabling deployment of the appliance within a private cloud infrastructure.
SaaS
When hosted by Netwrix, all server-side operations are managed by the vendor. The Endpoint Protector appliance is deployed in AWS.
Key features
Comprehensive control of portable storage devices
Configure and manage permissions for removable devices and ports. Configure policies for users, computers, and groups.
Data transmission monitoring
Blocks data leakage through the most common channels: email, browser, and other online applications.
Cross-platform eDiscovery module
Configure policies to inspect data on protected Windows, MacOS, and Linux computers. Detect sensitive data at rest, encrypt it or delete it.
Protection for Windows, MacOS and Linux
A next-generation cross-platform DLP solution that protects data from loss and theft at all endpoints.
License package options
Device Control
Device control is the first layer of defense for organizations that want to protect sensitive data from being lost via USB drives, Bluetooth connections, printers, and other removable media.
Control over 40 different classes of devices; including USB drives, external hard drives, card readers, printers, Bluetooth devices, webcams, smartphones, and more, as well as the ability to apply detailed controls to different types of devices and set policies for different user groups or classes of devices.
Device Control+
Controls data transfers to USB, Bluetooth, printers, and other peripheral ports and automatically encrypts removable media to protect data in transit.
Device Control+ extends the capabilities of the award-winning Netwrix Endpoint Protector Device Control solution, including the option to force 256-bit AES encryption when USB drives are allowed for data sharing and portability.
Active Data Defense
Active Data Defense allows security professionals to monitor, control, and block the transfer of sensitive data from employee devices.
Using content verification and contextual data scanning, sensitive information is protected from unauthorized access and theft through both hardware and software exit points, including removable drives, printers, email clients, corporate messaging applications, browser downloads, and more.
Active Data Defense+
Active Data Defense+ includes Active Data Defense functionality to help protect sensitive information from unauthorized access and theft. It also adds encryption capabilities when data transfer still requires the use of a removable drive.
In these scenarios, Active Data Defense+ includes an option to automatically protect data copied to a USB drive with 256-bit AES encryption to secure it in case of loss or theft.
Enterprise
Enterprise Netwrix Endpoint Protector combines all the functionality of Device Control, Active Data Defense, USB encryption, eDiscovery, and includes comprehensive support and maintenance services to manage configuration, server installation, policy configuration, and ongoing performance optimization.