A next-generation firewall (NGFW) or intrusion detection system (IDS) are common examples of technology that can be leveraged to perform DLP capabilities on the network. Network DLP capabilities can usually be undermined by a sophisticated threat actor through the use of data masking techniques such as encryption or compression.
NGFWs and IDSs are common tools used to implement Data Loss Prevention (DLP) functions on networks. Nonetheless, these technologies can be vulnerable to attack by sophisticated adversaries who employ data masking methods like encryption or compression to evade detection and prevent DLP capabilities from functioning effectively.