Data Loss Prevention

My customer want DLP Enforce can let domain users login by Active Directory Authentication and check himself/herself incidents like some antispam device interface, it it possible? I have an idea to make a role for domain users, but how to config "Incident Access" condition to make users only can see himself/herself incidents?

its in the role, you can define what all incidents that role can view.

Hi rexlin,

 dont think it is possible as you cannot use dynamic parameters (like login name, or group membership,...) in role definition. So you will have to define one role per user (oumf...).

 First time i heard about this kind of wish for a customer. What will happen if it is a real data leakage ? if you need to perform awareness using the tool, i think it is better to use endpoint popup each time you detect something. But "customer is our king" and if he want to have this functionality you have to do give him. What you can use instead it is an email send to them to inform that they violate a policy and give some information using dynamic notification parameters.

regards.

You can use the symantec workflow engine (which is free for enterprise customers) to do this.  Check out this forum post and video.

https://www-secure.symantec.com/connect/videos/want-know-how-self-remediate-using-symantec-data-loss-prevention-and-workflow