Data Loss Prevention

 View Only
  • 1.  Difference between Messages and incidents (DLP Network Monitor)

    Posted May 02, 2011 02:25 AM

    Hi there:

     

    I deployed Symantec Network Monitor (DLP), I want to know difference between "messages (today) and Incidents (today)

    Best regards

    ishaq



  • 2.  RE: Difference between Messages and incidents (DLP Network Monitor)

    Posted May 02, 2011 02:46 AM

    urgent.....................



  • 3.  RE: Difference between Messages and incidents (DLP Network Monitor)
    Best Answer

    Posted May 02, 2011 03:56 AM

    To my understanding:

    Messages(Today): The total number of messages/Data Stream, N/w Monitor has processed for the day starting from 12:00AM.

    Incidents(Today): The number of messages, which has matched the Policies(Incidents triggered) you had created for the day starting from 12:00AM today.

     

    Some one can correct me, If i missed something.



  • 4.  RE: Difference between Messages and incidents (DLP Network Monitor)

    Posted May 02, 2011 05:48 AM

    I am facing a problem i-e

    - /var folder have 0 free space, total /var space is 19 GB.

    ???



  • 5.  RE: Difference between Messages and incidents (DLP Network Monitor)

    Posted May 02, 2011 09:13 AM

    Hi Ishaq

    That sounds more like a privilege problem than an O/S problem with Symantec DLP. What operating system are you using? You should talk to your systems admin about that error.