Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell Data Security Product Service Descriptions

Summary: This article describes the various services and functionalities for the Dell Data Security line of products.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Affected Products:

  • Dell Encryption Enterprise
  • Dell Data Protection Server
  • Dell Encryption Enterprise Shield
  • Absolute
  • Dell Threat Defense
  • Dell Endpoint Security Suite Enterprise
  • Dell Data Guardian
  • EAS Management
  • Dell Data Protection | Encryption
  • Dell Data Protection | Cloud Edition
  • Dell Data Protection | Secure Lifecycle
  • Dell Data Protection | Protected Workspace
  • Dell Data Protection | Endpoint Recovery
  • Mozy by Dell
  • Dell Endpoint Security Suite Pro
  • VMware Carbon Black
  • CrowdStrike
Dell Data Protection Server
Back-End
  • Dell Compatibility Server (Service Name 'EpmCompatSvr') - Java based -
    • Links devices and users
    • Arbitrates groups
    • Generates new key material for Dell's Policy-Based Encryption application
    • Initiates and processes jobs that are based on active directory reconciliation
    • Leverages RMI for communication to other services
Note: This service is critical to the Dell Security Management Server's operation, capable of handling 150k devices. Memory must be scaled based on the number of endpoints.
  • Dell Compliance Reporter (Service Name 'EpmCompRptr') - Java Based - stand-alone service to generate reports from SQL data. This service pulls data directly from SQL to display compliance and custom report information that is based on the environment. This service is not critical to the core functionality of the Dell Security Management Server, but is required to leverage the "Compliance Reporter" option within the WebUI.
  • Dell Core Server (Service Name 'EpmCoreSvr') - .net based - manages communication and policy consumption from agent-based devices (CSF), and manages several SQL server interactions. Agent-based devices include Dell Endpoint Security Suite Enterprise, Dell Encryption's Self-Encrypting Drive mode, and Dell Encryption's BitLocker Manager mode. This service is critical for the operation of the Dell Security Management Server. This service can scale to 150k endpoints based on memory consumption.
Note: Dell Data Protection | Virtual Edition's Inventory Service is broken out of the Core Server Service. Some SQL interactions are split from the primary Core Server Service within Dell's Virtual Edition of the Security Management Server to improve performance.
  • Dell Device Server (Service Name DeviceServer) - Java Based - proxy service that hands data coming through the legacy device server ports to the security server. This service is critical to the Dell Security Management Server only when protecting legacy Policy-Based Encryption clients (7.x and earlier).
  • Dell Key Server (Service Name EpmKeySvr) - Java Based - method of pulling key material using Kerberos authentication: This service is not critical to the core functionality of the Dell Security Management Server.
  • Dell Message Broker (Service Name MessageBroker) - Java based - back-bone of Dell Security Server: Is a messaging queue for various server communications. Typically this service is leveraged to store messages during high-load times that do not require immediate processing. This can include policy updates for devices that are being delivered to a policy proxy, and geolocation data incoming form Dell Data Guardian services. This service is critical for the core functionality of the Dell Security Management Server. Memory may be a consideration when exceeding 20k devices. This service has been tested up to 150k devices with no issues.
  • Dell Policy Proxy (Service name of Guardian) - C - handles processing of policy and inventory information for Dell policy-based Encryption clients. This service can handle up to 150k endpoints with a single instance. It Dell recommended splitting into multiple policy proxies around 50k-75k devices, depending on the check-in period for devices.
  • Dell Access Group Service (Service Name aclserv) - C - This service manages various permissions and group access for various Dell Security products.
  • Dell Security Server (Service Name SecurityServer) - Java based - Functions include:
    • WebUI
    • Device activation
    • Data guardian hosting and data processing
    • AD processing
    • SQL updates 

This service is core to the functionality of the Dell Security Management Server. This service has been tested to 150k devices, but depends on memory consumption as devices scale.

Note: Dell Data Protection | Virtual Edition's "Forensic Service" is broken out of the Security Server Service. Some SQL interactions are split from the primary Security Server Service within Dell's Virtual Edition of the Security Management Server to improve performance.
  • Dell PostgreSQL (Service Name 'DDP_PostgreSQL') - PGSQL - stores audit data for Secure Lifecycle, Data Guardian, and future applications. This service is used to store data for reporting needs. This is not a critical service, but results in errors when accessing the "Audit Events" section of the Dell Security Management Server's WebUI.
Front-End
  • Dell Beacon Server (java based) - This is leveraged for Protected office documents that Dell Data Guardian creates and a device that does not have Dell Data Guardian that is installed on it, can open the file. There are no load requirements or recommendations on this service. The Theoretical and tested load has exceeded 5k requests/min.
  • Dell Core Server Proxy - (java based) - This service is a proxy service that we run through jetty that passes requests from the Internet back to our backend server to the core server. No data is manipulated, and this service is meant to separate our backend services that have direct database and internal network access from the Internet. There are no known load limits on this service.
  • Dell Device Server - (java based) - This service is a proxy service that we run through jetty that passes requests from the Internet back to our backend server to the Security server. No data is manipulated, and this service is meant to separate our backend services that have direct database and internal network access from the Internet. There are no known load limits on this service. This is a legacy service that was used for our 7.x and older clients, it is typically disabled in newer environments.
  • Dell Policy Proxy (Service name of Guardian) - C - handles processing of policy and inventory information for Dell policy-based Encryption clients. This service can handle up to 150k endpoints with a single instance. Dell Technologies recommends splitting into multiple policy proxies around 50k-75k devices, depending on the check-in period for devices.
  • Dell Security Server Proxy (SecurityServerProxy) - java based - proxy service that hands data coming through the security server port to the backend service
EAS Management / Dell Data Protection | Mobile Edition (End of Support/End of Life as of March 2018)
  • EAS Device Manager - C - pulls inventory information from EAS-managed devices during check-in to a client access server.
  • EAS Mailbox Manager - C - manages whether email can be received and sent based on policy information.
Dell Data Protection | Enterprise Edition Shield
  • CMGshield - C -
    • Communicates to the Dell Data Protection | Encryption memory filter driver
    • Handles any policy and user context data and ensures that the driver is processing properly.
  • EMS - C - handles monitoring of ports and some processes to ensure that any storage is monitored and marked as internal or removable for processing of EMS and PCS policies.
  • Dell Encryption Removal Agent (CMGDecryptAgent) - C - decrypts data.
Dell Data Protection | Personal Edition
  • CMGShield - C -
    • Communicates to the DDP | E memory filter driver
    • Handles any policy and user context data, and ensures that the driver is processing properly.
  • EMS - C - handles monitoring of ports and some processes to ensure that any storage is monitored and marked as internal or removable for processing of EMS and PCS policies.
  • Dell Embedded Server (EmbeddedServer) - SQL compact - Tiny virtualized DDP server that contains the policies and stores the data within SQL compact for user linkages to policy data.
  • Dell Encryption Removal Agent (CMGDecryptAgent) - C - decrypts data. Cause it is real strong like that.
Dell Data Protection | Encryption: Self-Encrypting Drive, BitLocker Manager
Remotely Managed
  • Dell Data Protection Security Tools Authentication - C - digital Persona agent that handles authentication and user credentials for Password Manager and for syncing to the PBA.
  • DellMgmtAgent - .net Framework - WCF-based application that leverages data from plugins to enact various security settings.
  • DellMgmtLoader - .net - ensures that the appropriate plugins are loaded and ensures that application have not been tampered with.
Locally Managed
  • DellMgmtAgent - .net - WCF-based application that leverages data from plugins to enact various security settings.
  • DellMgmtLoader - .net - ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
  • DellMgmtServer - SQL Lite - tiny virtualized DDP server that contains policy information and stores key and user pairing data.
  • Dell Data Protection Security Tools Authentication - C - digital Persona agent that handles authentication and user credentials for Password Manager and for syncing to the PBA.
Dell Data Protection | Cloud Edition
Note: As of May 2018, Dell Data Protection | Cloud Edition has reached EOS and this section is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
  • Dell Data Protection Cloud Edition (Service name CloudSvc) - .net - manages the interactions between files and the storage filter driver that is based on policy.
  • Dell Data Protection Cloud Edition Loader (Service name CloudSvcLoader) - .net - ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
Dell Data Protection | Secure Lifecycle
Note: As of November 2018, Dell Data Protection | Secure Lifecycle has reached EOS and this section is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
  • Dell Data Protection Secure Lifecycle (Service name DDPSLSvc) - .net - manages the interactions between files and the storage filter driver that is based on policy.
  • Dell Data Protection Secure Lifecycle Loader (Service name DDPSLSvcLoader) - .net - ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
Dell Data Guardian
  • Dell Data Guardian (Service name XendowSvc) - .net - manages the interactions between files and the storage filter driver that is based on policy.
  • Dell Data Guardian Loader (Service name XendowSvcLoader) - .net - ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
Dell Data Protection | Protected Workspace (End of Support/End of Life as of January 2018)
Note: As of January 2018, Dell Data Protection | Protected Workspace has reached EOS and this section is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
  • Invincea Service (Service name InvProtectSvc) - monitors and generates sandboxes that are based on the policy set delivered.
Dell Data Protection | Endpoint Recovery (End of Support/End of Life as of October 2017)
Note: As of October 2017, Dell Data Protection | Endpoint Recovery has reached EOS and this section is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
  • Dell DDP|ER Backup Service (Service name: DellDDPERBackup) - .net - service that interacts between the DDP | ER storage filter driver and the data on the disk.
  • Dell DDP|ER Database Service (Service name DellDDPERDatabase) - SQL Lite - database that contains backup history data and file status, links, and content from the database files that are offloaded.
Mozy by Dell
Note: As of January 2020, Mozy by Dell has reached EOS and this section is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
Mozy Sync

No service is installed with this application.

Mozy Backup
  • Mozy Backup Service (Service name DDPCBBackup) - C - service that communicates to the storage filter driver to process data based on policy.
Absolute
  • RPCNet - C - service that polls random elements of the device to ensure policy compliance.
Dell Threat Defense
Note:
  • Dell Threat Defense (Service name CylanceSVC) - .net - service that interacts with the memory filter driver to ensure device security based on policy.
Dell Endpoint Security Suite Pro
Note:
  • As of January 2019, Dell Endpoint Security Suite Pro has reached End of Service and this article is no longer updated by Dell. For more information, reference End of Life / End of Support Policy for Dell Data Security
  • Reference Endpoint Security for additional information about current products.
  • Dell Threat Protection Service (Service name DellTPAgent) - .net - Dell plug-in to control McAfee services using policy and stores said policy data inside the Dell Encryption vault.
  • McAfee Agent Backwards Compatibility Service (McAfeeFramework) - C/C++ - Allows for interop with older operating systems, if necessary.
  • McAfee Agent Common Services (macmnsvc) - C/C++ - Backbone of the McAfee services.
  • McAfee Agent Service (masvc) - C/C++ - Primary management service for McAfee products and acts as an interconnect to consume policies.
  • McAfee Endpoint Security Web Control Service (mfewc) - C/C++ - service that controls the communication to the McAfee servers that host web content filter scores to ensure the safety of the websites where users are navigating.
  • McAfee Firewall Core Service (mfefire) - C/C++ - Ensures that policies that are published for the Client Firewall are enforced.
  • McAfee Service Controller (mfemms) - C/C++ - Service and file protection service (ensures that no tampering happens to McAfee products and services).
  • McAfee Validation Trust Protection Service (mfevtp) - C/C++ - Connects to McAfee service for service validation and updates.
  • Dell Data Protection Security Tools Authentication - C - digital Persona agent that handles authentication and user credentials for Password Manager and for syncing to the PBA.
  • DellMgmtAgent - .net - WCF-based application that leverages data from plugins to enact various security settings.
  • DellMgmtLoader - .net - ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
Dell Endpoint Security Suite Enterprise (with FireWall and Web Protection)
Note:
  • Cylance PROTECT (CylanceSVC) - .net - service that interacts with the memory filter driver to ensure device security based on policy.
  • Dell Threat Protection Service (Service name DellTPAgent) - .net - Dell plug-in to control McAfee services using policy and stores said policy data inside the Dell Encryption vault.
  • McAfee Agent Backwards Compatibility Service (McAfeeFramework) - C/C++ - Allows for interop with older operating systems, if necessary.
  • McAfee Agent Common Services (macmnsvc) - C/C++ - Backbone of the McAfee services.
  • McAfee Agent Service (masvc) - C/C++ - Primary management service for McAfee products and acts as an interconnect to consume policies.
  • McAfee Endpoint Security Web Control Service (mfewc) - C/C++ - service that controls the communication to the McAfee servers that host web content filter scores to ensure the safety of the websites to which users are navigating.
  • McAfee Firewall Core Service (mfefire) - C/C++ - Ensures that policies that are published for the Client Firewall are enforced.
  • McAfee Service Controller (mfemms) - C/C++ - Service and file protection service, which ensures there is no tampering with McAfee products and services.
  • McAfee Validation Trust Protection Service (mfevtp) - C/C++ - Connects to McAfee service for service validation and updates.
  • Dell Data Protection Security Tools Authentication - C - Digital Persona agent that handles authentication and user credentials for Password Manager and for syncing to the PBA.
  • DellMgmtAgent - .net - WCF-based application that leverages data from plugins to enact various security settings.
  • DellMgmtLoader - .net - Ensures that the appropriate plugins are loaded and ensures that applications have not been tampered with.
VMware Carbon Black
  • CB Defense (CbDefense) - C/C++ - Primary management service for Carbon Black Sensor
CrowdStrike
  • CrowdStrike Falcon Sensor Service (CSFalconService) - C/C++ - Primary management service for CrowdStrike Falcon Sensor (helps protect the computer from malicious activities).

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Additional Information

Product Life Cycle (End of Support and End of Life) Policy for Dell Data Security

Affected Products

Absolute, Dell Data Guardian, Dell Encryption, Dell Protected Workspace, Dell Threat Defense, Dell Endpoint Security Suite Pro, Dell Endpoint Security Suite Enterprise, Mozy by Dell
Article Properties
Article Number: 000124845
Article Type: How To
Last Modified: 19 Jun 2024
Version:  12
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.