Data Loss Prevention

Hello,

I have recently begun a mission, for my customer, on Symantec Data Loss Prevention solution (v12.5.1), and I have some questions about it.

The customer wants to run flexresponse for AFAC response action. (Cloud Storage Apps and Messengers)

Dose it have any roadmap or enhancement request for this requirement?

Many thanks & regards

Woo Hee..

You can create an Automated Flex Response that applies to AFAC. Though it can't be specific to an application. See the attached picture for the Automated Response.

Though you might be able to create a custom flexresponse one. If you OUTPUT the attributes for the 'message' it will include the following attribute "endpoint-application-name". You can use this as a way to identify the application name and then have the flexresponse trigger on that specific field/item.

Ronak

If this answers your question please marked as solved.

Hello Ronak,

First for all thank for your comment.

I had test your resolution but It doesn't work as well.

I made an automated flexresponse and applied on both conditions AFAC and Endpoint Local Disk.

Endpoint Local DIsk worked well with flexresponse but AFAC didn't call flexresponse.

Would check our configration and gudie me what I missed?

Plese check attached file.

Attachment(s)

Flex Response Configuration.docx   225 KB 1 version