Configuring Manual Scan Notifications—Data Loss Prevention Parent topic

The following explains the steps required to configure manual scan data loss prevention notifications:

Procedure

  1. On the left menu, click Manual Scan. The Manual Scan screen appears.
  2. Under, Select the scan type, click the Data loss prevention link.
  3. Select an existing policy or click Add to create a new one.
  4. Click the Notification tab.
  5. Under People to notify, select from the following:
    • Notify violator
    • Notify administrator
      Note
      Note
      The Notify violator option only includes a Subject and a Message. The consolidated message settings under Notify administrator do not apply to the violator.
  6. Next to Notify Violator, click Show details and select from the following:
    • Subject—type a subject that will appear in the subject line of the email (for example: Data Loss Prevention Notification).
    • Message—you can create a unique message using variables like: [Server Name], [Data Loss Prevention Rules], [Date], [Time], [File Name/Web Content Title], [File/Web Content Location], [Action], and Violator.
  7. Next to Notify administrator, click Show details and configure the following:
    • To—the global email address(es) appear in this field. You can enter additional email addresses, separated by a semicolon, to create unique notifications.
    • Subject—type a subject that will appear in the subject line of the email (for example: Data Loss Prevention Notification).
    • Message—you can create a unique message using variables like: [Server Name], [Data Loss Prevention Rules], [Date], [Time], [File Name/Web Content Title], [File/Web Content Location], [Action], and [Violator].
      Note
      Note
      The available variables appear in the left window, and the message body in the right window.
  8. Under Settings, choose the delivery options for this notification according to the following:
    • Send consolidated notifications every [xx] [hours or days]—select this option to send a notification according to the number of hours or days you type in the variable field.
    • Send consolidate notifications every [xx] occurrences—select this option to send a notification after a certain number of occurrences as you stipulate in the variable field.
    • Send individual notifications—select this option to send a notification each time an event occurs.
  9. Under Advanced Notification (SNMP), select SNMP to enable this option.
  10. Click Show details to expand the options, and configure according to the following:
    • IP Address
    • Community
    • Message
  11. Select Write to Windows event log to write each notification to the Windows event log.
  12. Click Save.