Data Loss Prevention

Hello all,

It's it possible to configure the response rule User Cancel to not create a log if the user aborts/cancel the action? Anywhere on Agent config maybe..

By default we know that the DLP console records both user actions.

Thanks,

Morgado

Morgado,

That is not possible. 

If you did not want an incident then it would be considered a false positive. You can run a report to look for a user cancel and then delete those if you would like.

Over all the system is going to keep a record when it finds data you are looking for. The main reason also is that users will try to take data repeatedly and you shuld have a record of that.

For instance a user will try many things to take data and even if they cancel the process you should have a reord of 'odd' behavior and this will help you relaixe that a user is doing someting the should not.

Ronak

If this answers your question please marked as solved!

Thanks. That's what I thought.. Just a plugin will deal with that case.

Regards,

Morgado,

If this answers your question please marked as solved!

Ronak