Is "Endpoint DLP support for onboarded servers" feature corresponding for MIP Scanner?

Question

Does enabling the 'Endpoint DLP support for onboarded servers' feature in Microsoft Purview eliminate the need for the MIP Scanner on on-prem file servers? What level of protection and automatic labeling for sensitivity labels can be expected for supported file servers with this feature enabled?

Answer 1

Hi Yusuf Buker,

Thank you for posting query in Microsoft Q&A Platform.

Enabling the 'Endpoint DLP support for onboarded servers' feature in Microsoft Purview does not eliminate the need for the MIP Scanner on on-prem file servers. The 'Endpoint DLP support for onboarded servers' feature in Microsoft Purview is designed to provide additional protection and automatic labeling for sensitive data on endpoints, such as laptops and desktops.

The MIP Scanner is still required for on-prem file servers to scan and classify files based on sensitivity labels. The MIP Scanner can be used to automatically apply sensitivity labels to files based on their content, metadata, or location.

With the 'Endpoint DLP support for onboarded servers' feature enabled, you can expect additional protection and automatic labeling for sensitive data on endpoints. This feature allows you to define policies to automatically label and protect sensitive data on endpoints, such as laptops and desktops. When a user creates or modifies a file on an endpoint, the file is automatically scanned for sensitive data, and if sensitive data is found, the file is labeled and protected according to the policy.

However, it's important to note that this feature does not provide the same level of protection and automatic labeling for on-prem file servers as the MIP Scanner. The MIP Scanner is specifically designed to scan and classify files on on-prem file servers based on sensitivity labels, whereas the 'Endpoint DLP support for onboarded servers' feature is designed to provide additional protection and automatic labeling for sensitive data on endpoints.

In summary, enabling the 'Endpoint DLP support for onboarded servers' feature in Microsoft Purview provides additional protection and automatic labeling for sensitive data on endpoints, but it does not eliminate the need for the MIP Scanner on on-prem file servers. The MIP Scanner is still required to scan and classify files based on sensitivity labels.