Data Loss Prevention

 View Only
  • 1.  DLP and ITA - What data is copied?

    Posted May 21, 2015 10:04 AM

    Hello everyone,

    My team is looking to utilize the advanced reporting capabilities provided by Symantec ITA for our DLP solution, however we're looking to determine exactly what data is copied from DLP into the ITA data cubes.  Does anyone know exactly what data fields from DLP are transmitted over to ITA?

    Any info on this would be great.

    Thanks!



  • 2.  RE: DLP and ITA - What data is copied?

    Posted Jun 10, 2015 05:46 PM

    If I recall, ITA will view the DLP data where it resides within the Oracle DB, rather than copying it to another repository.

    ITA is really a robust reporting tool parsing the data in your DLP db.



  • 3.  RE: DLP and ITA - What data is copied?

    Posted Jun 12, 2015 01:18 PM

    You would have to look at the definition of each cube to see exactly what data is involved.  It is pulling that data from the Oracle DB into the system.  What you won't get is the Incident Body (highlighted) text as that remains encrypted and unable to be extracted from the DB if that is concern