Hi Wayne ,

yes, It is possible for this. u must need to integrate the DLP with AD and activate smart responce rule to send email notifiaction to manager. This u  will find at policy rule in manage>Policy list ......

Please refer below link u will get better idea.

https://www-secure.symantec.com/connect/forums/inc...

http://www.symantec.com/connect/forums/dlp-inciden...

https://www-secure.symantec.com/connect/articles/s...

Wayne,

While LDAP/AD is the best way to to do it, it is also possible to use a flat file of user id to manager email address.

JGT

I think you are referring to something else..

If you want to send an email to the ALREADY found manager through AD integration..

Can the EMAIL contain the actual incident details?

The answer is NO..the reason why is as follows:

• From a security perspective you DO NOT want to send any of the cpatured data outside of the system. You would be just proliferating the loss of data through internal email.
• This is why reports are "suggested" to be links to the DLP console, so authentication has to happen for the "RIGHT" person to see the data.

Keep in mind that the idea of the DLP workflow is to provide as much information on the incident in the email, but still enforce the security of the Encrpyted DB to store all of the important data.