Data Loss Prevention

 View Only

  • 1.  Send E-mail Notification to Managers with Detail Content

    Posted Jan 29, 2013 03:14 AM

    Hi ,

     

        Is it possible to send e-mail to manager when incident happened, and the e-mail's content include the incident snaphots?

        I know there is a $INCIDENT_SNAPSHOT$ to be a link, how about snaphots ?

     

    Wayne Chen



  • 2.  RE: Send E-mail Notification to Managers with Detail Content

    Posted Feb 07, 2013 11:29 PM

    Hi Wayne ,

    yes, It is possible for this. u must need to integrate the DLP with AD and activate smart responce rule to send email notifiaction to manager. This u  will find at policy rule in manage>Policy list ......

    Please refer below link u will get better idea.

    https://www-secure.symantec.com/connect/forums/incident-detail-information

    http://www.symantec.com/connect/forums/dlp-incidents-response-rule-configuration

    https://www-secure.symantec.com/connect/articles/send-email-notification-admin-dlp-user-change



  • 3.  RE: Send E-mail Notification to Managers with Detail Content

    Posted Feb 21, 2013 01:51 PM

    Wayne,

    While LDAP/AD is the best way to to do it, it is also possible to use a flat file of user id to manager email address.

    JGT



  • 4.  RE: Send E-mail Notification to Managers with Detail Content

    Trusted Advisor
    Posted Feb 21, 2013 07:42 PM

    I think you are referring to something else..

    If you want to send an email to the ALREADY found manager through AD integration..

    Can the EMAIL contain the actual incident details?

    The answer is NO..the reason why is as follows:

    • From a security perspective you DO NOT want to send any of the cpatured data outside of the system. You would be just proliferating the loss of data through internal email.
    • This is why reports are "suggested" to be links to the DLP console, so authentication has to happen for the "RIGHT" person to see the data.

    Keep in mind that the idea of the DLP workflow is to provide as much information on the incident in the email, but still enforce the security of the Encrpyted DB to store all of the important data.



  • 5.  RE: Send E-mail Notification to Managers with Detail Content

    Posted Feb 22, 2013 10:43 PM

    Agree with DLP solution but ultimately when you sent link notification to manager then he will access all information related to thet specific incidents. It has to be given access to the manaher to investigate the incidents so it must be sent out to manager eithre incident links or incident snapshot.You can proceed to sent notification with above suggestion since manager needs above incident data for investiagtion.