🔒 NPAV – Data Leak Prevention (DLP) Documentation

📖 Introduction

The Data Leak Prevention (DLP) feature in Net Protector Antivirus (NPAV) helps safeguard sensitive information by monitoring user activity and preventing unauthorized data transfers.

It ensures that confidential files and data remain protected against accidental leaks or malicious exfiltration through browsers, drives, or downloads.

🔧 Accessing Data Leak Prevention

Open NPAV Antivirus.
Click on the Protection tab -> Application Control.
You will be Navigatd to Settings → Protection tab.
Click and Enabel the Data Leak Prevention Feature.

⚙️ Options & Controls

Setting	Description	Recommendation
DLP Toggle (ON/OFF)	Enables or disables Data Leak Prevention.	✅ Keep ON for continuous protection.
Action	Choose how NPAV responds to detected leaks: • Block & Report – Prevents the action and logs it. • Report Only – Allows the action but records it for review.	Use Block & Report for maximum security.
Snapshot to Monitor	Captures screen snapshots at defined intervals to monitor suspicious activity. • Interval (seconds) – Time gap between snapshots. • Count – Number of snapshots taken.	Adjust based on monitoring needs (default: 1 sec, 3 snapshots).
Add Browsers to Monitor	Select browsers where DLP will actively monitor data transfers. Options include Chrome, Firefox, Edge, Opera, Brave, Tor, Aurora, Maxthon.	Enable for all browsers in use.
Drive to Monitor (expandable)	Configure monitoring of specific drives for unauthorized data movement.	Enable for external/removable drives.
Download Monitor (expandable)	Tracks and controls file downloads to prevent sensitive data leaks.	Enable if frequent downloads occur.

📝 Feature Description

Monitors browser activity, file transfers, and downloads for potential data leaks.
Provides real-time alerts and detailed reports for administrators.
Offers flexible response modes (block or report) to balance security with usability.

⚠️ Best Practices

Keep DLP enabled at all times to ensure continuous monitoring.
Use Block & Report in high-security environments (corporate, financial, healthcare).
Regularly review reports to identify suspicious activity patterns.
Configure drive and download monitoring if employees frequently use external storage or download files.

💡 Tips

For organizations, integrate DLP reports into your security audit process.
If performance issues occur, fine-tune snapshot intervals and browser monitoring.
Use Report Only mode during initial deployment to observe activity before enforcing strict blocking.

✅ Summary

The Data Leak Prevention (DLP) feature in NPAV is a powerful safeguard against accidental or intentional data loss.

By monitoring browsers, drives, and downloads, and providing flexible response actions, it ensures sensitive information stays protected.

For best results, keep DLP enabled with Block & Report mode in critical environments.

✅ Step 1: Enable Data Leak Prevention Toggle button to ON.

✅ Step 2: Select Action -Block & Report OR Report Only.

✅ Step 3: Give required values in Snapshot to Monitor If By default values are not desired.

✅ Step 4: Added Browsers to Enable the Features on.

✅ Step 5: Expand the Drive to Monitor and click on Drive Monitor Window.

✅ Step 6: Select Removable Drive, Network Drive and Local Drive on which you want to Enable Restrictions on.

✅ Step 7: Choose Actions to Restrict – For Better protection, Select all the Actions

✅ Step 8: Enter the Extensions to protect.

✅ Step 9: Enter Processes to include and exclude.

✅ Step 10: Click on Save Button.

✅ Step 11: Expand the Download Monitor.

✅ Step 12: Select the Mode you desire.

✅ Step 13: Enter Block/Allow Extensions.

✅ Step 14: Specify Extensions for Include and Exclude for Both Allow and Block Extensions.

✅ Step 15: Enable FAM Feature.

✅ Step 16: Click on Drive Monitor Window.

✅ Step 17: Enable the Settings as mentioned earlier and click on Save Button.

Note :- In FAM, By Defaut only Reporting will be done as per given Settings.

To Block Resources and Reporting features use DLP Only.