Cloudflare One Cloudflare One Cloudflare One
DLP DLP DLP
Data Loss Prevention — giảm rủi ro rò rỉ dữ liệu nhạy cảm qua web, email hoặc SaaS. Data Loss Prevention — reduces sensitive data leakage via web, email, or SaaS. Data Loss Prevention — reduces sensitive data leakage via web, email, or SaaS.
Là gì? What is it? What is it?
DLP giúp giảm rủi ro rò rỉ dữ liệu nhạy cảm. Data Loss Prevention — giảm rủi ro rò rỉ dữ liệu nhạy cảm qua web, email hoặc SaaS. DLP reduces the risk of sensitive data leakage. Data Loss Prevention — reduces sensitive data leakage via web, email, or SaaS. DLP reduces the risk of sensitive data leakage. Data Loss Prevention — reduces sensitive data leakage via web, email, or SaaS.
Tại sao quan trọng? Why it matters ហេតុអ្វីសំខាន់
Nhân viên làm việc từ mọi nơi — Zero Trust thay VPN “mở toàn mạng” bằng truy cập theo policy. People work from anywhere — Zero Trust replaces “full network” VPN with policy-based access. People work from anywhere — Zero Trust replaces “full network” VPN with policy-based access.
Khi nào nên dùng? When to use it When to use it
- Khi bạn cần giải pháp DLP trên Cloudflare thay vì tự host When you need DLP on Cloudflare instead of self-hosting When you need DLP on Cloudflare instead of self-hosting
- Khi team mới bắt đầu và muốn bản free/low-ops để thử When your team is starting out and wants a low-ops free tier to experiment When your team is starting out and wants a low-ops free tier to experiment
- Khi tài liệu chính thức gợi ý sản phẩm này cho use case của bạn When official docs recommend this product for your use case When official docs recommend this product for your use case
Ví dụ đơn giản Simple example Simple example
Ví dụ: một team SME bật DLP cho website onboarding — họ thấy lợi ích ngay mà chưa cần kiến trúc phức tạp. Example: an SME team enables DLP for an onboarding site — they see value quickly without a complex architecture. Example: an SME team enables DLP for an onboarding site — they see value quickly without a complex architecture.
Đừng nhầm DLP với toàn bộ nền tảng Cloudflare — đây là một mảnh ghép; kết hợp với DNS/proxy và sản phẩm liên quan. Don’t confuse DLP with the entire Cloudflare platform — it’s one piece; combine it with DNS/proxy and related products. Don’t confuse DLP with the entire Cloudflare platform — it’s one piece; combine it with DNS/proxy and related products.
Hình ảnh trực quan (Cloudflare Docs) Visual guides (Cloudflare Docs) Visual guides (Cloudflare Docs)
Bảo vệ dữ liệu đang truyền (data in transit) Securing data in transit Securing data in transit
Bảo vệ data in transit với Gateway/DLP — inspect TLS traffic trước khi tới SaaS hoặc Internet. Data in transit is often considered vulnerable to interception or tampering during transmission. Data Loss Prevention (DLP) technologies can be used to inspect the contents of network traffic and block sensitive data from going to a risky destination. Data in transit is often considered vulnerable to interception or tampering during transmission. Data Loss Prevention (DLP) technologies can be used to inspect the contents of network traffic and block sensitive data from going to a risky destination.
Thuật ngữ: Concepts: Concepts: Gateway · DLP · TLS · CASB · Inline inspection
Sơ đồ chính thức ↗ Official diagram ↗ Official diagram ↗ · Bảo mật Security Security
Bảo vệ dữ liệu lưu trữ (data at rest) Securing data at rest Securing data at rest
CASB theo API của Cloudflare hoạt động thế nào và bảo vệ dữ liệu đang lưu (data at rest). Learn how Cloudflare's API-driven Cloud Access Security Broker (CASB) works and secures data at rest. Learn how Cloudflare's API-driven Cloud Access Security Broker (CASB) works and secures data at rest.
Thuật ngữ: Concepts: Concepts: CASB · SaaS API · Data at rest · DLP
Sơ đồ chính thức ↗ Official diagram ↗ Official diagram ↗ · Bảo mật Security Security
Sản phẩm liên quan Related products Related products
- Access Access Access
ZTNA — xác thực user/device trước khi vào app private (SSO, policy, không mở toàn mạng). ZTNA — authenticate users/devices before private apps (SSO, policy, no full network access). ZTNA — authenticate users/devices before private apps (SSO, policy, no full network access).
- Tunnel Tunnel Tunnel
Tunnel outbound (`cloudflared`) kết nối app nội bộ tới Cloudflare mà không mở port inbound — tên cũ: Argo Tunnel. Kết nối outbound `cloudflared` — expose app nội bộ không mở port inbound; tên cũ Argo Tunnel. Outbound tunnel (`cloudflared`) connects internal apps to Cloudflare without inbound ports — formerly Argo Tunnel. Outbound `cloudflared` connections — expose internal apps without inbound ports; formerly Argo Tunnel. Outbound tunnel (`cloudflared`) connects internal apps to Cloudflare without inbound ports — formerly Argo Tunnel. Outbound `cloudflared` connections — expose internal apps without inbound ports; formerly Argo Tunnel.
- Gateway Gateway Gateway
Secure Web Gateway (SWG) — filter DNS/HTTP, malware, DLP policy khi user ra Internet. Secure Web Gateway (SWG) — filter DNS/HTTP, malware, DLP policies for Internet browsing. Secure Web Gateway (SWG) — filter DNS/HTTP, malware, DLP policies for Internet browsing.
- Zero Trust Zero Trust Zero Trust
Không tin mặc định — mỗi truy cập phải được xác minh theo identity, thiết bị và policy. Never trust by default — every access is verified by identity, device, and policy. Never trust by default — every access is verified by identity, device, and policy.
Tiếp theo Next step Next step
Quay lại bản đồ sản phẩm hoặc chọn lộ trình học phù hợp. Return to the product map or pick a learning track. Return to the product map or pick a learning track.