Skip to content

Microsoft Purview Data Loss Prevention migration assistant for Symantec (preview)⚓︎

What is Microsoft Purview Data Loss Prevention migration assistant for Symantec (preview)?⚓︎

The Migration Assistant for Microsoft DLP tool is a Windows based desktop application that will migrate your DLP policies from other DLP platforms to our Unified DLP platform. Our tool takes you through a simple five-step migration process. It accepts Symantec DLP policy XML exports, performs mapping, and creates equivalent Unified DLP policies through PowerShell scripts. You can safely use the tool to create DLP policies in test mode, which does not affect your live data or interact with current environment.

Migration tasks that Microsoft Purview Data Loss Prevention migration assistant for Symantec performs are :⚓︎

This takes over many of the difficult or tedious tasks involved in a DLP migration project:

  • In traditional migration scenario, you need to perform feasibility analysis between source & target DLP platforms, map features, migrate policies manually, and test and tweak DLP policies. Your migrated DLP policies can be up and running within minutes of starting the M365 DMA process.

  • With this, you can scale up your migration project quickly from moving a single policy manually to multiple policies at the same time.

  • This automatically identifies Sensitive Information Types (SITs) or Data Identifiers in source policies and creates Custom SITs in your Microsoft tenant moving over all your custom regular expressions and keywords in a few clicks.

  • This detects which conditions, exclusions & actions are currently being used in source policies and automatically creates new rules with the same conditions, exclusions & actions.

  • This provides you with a detailed migration report with policy wise migration status and recommendations.

  • This ensures that your DLP policy migration project is completely private and takes place within the boundaries of your organization.

  • This supports policy migration from Symantec Data Loss Prevention 15.7 or earlier.

How does this works?⚓︎

During a given instance of migration, the M365 DLP Migration Assistant works in five phases:

  1. Input: This ingests one or more Symantec DLP policy XML files.

  2. Analyze: This interprets the files & identifies Symantec DLP policy constructs.

  3. Rationalize: This maps the identified Symantec DLP policy constructs to Unified DLP capabilities. It performs validations for Unified DLP platform limitations.

  4. Migrate: This executes PowerShell scripts for the DLP scenarios identified & supported by the UDLP platform.

  5. Reporting: This provides the user with a detailed migration report about which policies were migrated successfully, partially and/or not migrated. It also provides recommendations to improve the migration fidelity further.


The migration assistant is in preview (blog). You can learn more about the migration assistant using the following resources:

o Learn more about the migration assistant

o Get started with migrating DLP policies

o Use the migration assistant to migrate policies from Symantec

Download Process⚓︎

Use the GitHub link to download the tool and follow instructions for how to install, run and configure the tool.

Provide Feedback & Report Bugs⚓︎

Please report errors, share feedback & any feature requests with us by opening a new issue in this Github repository.