cyber.hendryadrian.com
Security News · security.com

Symantec Details Kubernetes-Based DLP for Cloud Workloads

· Original article ↗

Summary

Symantec describes deploying its Distributed Detection Service (DDS) on Kubernetes to inspect cloud and AI traffic, storage, and databases, citing autoscaling, rolling updates, persistent identity, and cloud-vault integrations.

Key points

  • Symantec says DDS can run in Kubernetes clusters across GKE, EKS, AKS, and private-cloud distributions.
  • DDS is packaged as a Helm chart and uses Horizontal Pod Autoscaling to adjust inspection capacity to traffic.
  • The service uses rolling updates for upgrades and StatefulSets with persistent volumes to retain engine identity and state across restarts.
  • Kubernetes CSI Drivers retrieve authentication files and mTLS certificates from cloud-native secret stores, according to Symantec.
  • Symantec describes inspecting AI traffic through Google Agent Gateway and its DLP Traffic Extension.
  • DDS can integrate with cloud proxies and load balancers for traffic inspection, and with serverless services to scan cloud storage and databases.

Article Details

Event Type
Product capability overview of Symantec DLP Distributed Detection Service (DDS) deployed on Kubernetes.
Impact
DDS is described as bringing data loss prevention inspection closer to cloud workloads and traffic. The article says it can inspect AI-related traffic, cloud ingress and egress, and data in cloud storage and databases, while supporting autoscaling, resilient deployments, and integration with existing DLP policies.

Vendors

Amazon Web ServicesCSI Drivers to securely fetch secrets just-in-time from cloud-native vaults, like Google Secret Manager, AWS Secrets Manager, or Azure Key Vault. Googleit leverages Kubernetes CSI Drivers to securely fetch secrets just-in-time from cloud-native vaults, like Google Secret Manager, AWS Secrets Manager, or Azure Key Vault. Microsoft Azurefetch secrets just-in-time from cloud-native vaults, like Google Secret Manager, AWS Secrets Manager, or Azure Key Vault. SymantecFrom AI traffic to cloud storage and databases, Symantec DLP DDS extends existing DLP protection into the environments and applications your teams are already familiar with. 

Products

Amazon Elastic Kubernetes ServiceWhether you are using Google Kubernetes Engine (GKE), Amazon EKS, Azure Kubernetes Service (AKS), or even private cloud Kubernetes distributions such as VMware or Red Hat OpenShift, DDS adapts to the target environment.Azure Kubernetes Service (AKS)Whether you are using Google Kubernetes Engine (GKE), Amazon EKS, Azure Kubernetes Service (AKS), or even private cloud Kubernetes distributions such as VMware or Red Hat OpenShift, DDS adapts to the target environment.Distributed Detection Service (DDS)Kubernetes gives distributed detection service (DDS) the scaling, resilience, and automation needed to run DLP as a cloud-native service. Gemini Enterprise Agent Platformand tool calls. DDS integrates directly with Google Agent Gateway, a component of the Gemini Enterprise Agent Platform, through the Symantec DLP Traffic Extension. This allows DLP inspection to be applied toGoogle Agent Gateway1. Protect generative AI workloads (Google Agent Gateway)Google Kubernetes EngineWhether you are using Google Kubernetes Engine (GKE), Amazon EKS, Azure Kubernetes Service (AKS), or even private cloud Kubernetes distributions such as VMware or Red Hat OpenShift, DDS adapts to the target environment.KubernetesTaking DLP to the Cloud Edge with KubernetesSymantec DLPFrom AI traffic to cloud storage and databases, Symantec DLP DDS extends existing DLP protection into the environments and applications your teams are already familiar with. Symantec DLP Traffic Extensionwith Google Agent Gateway, a component of the Gemini Enterprise Agent Platform, through the Symantec DLP Traffic Extension. This allows DLP inspection to be applied to AI-related traffic even as it moves through the

Related Articles