Data Loss Prevention

 View Only
  • 1.  User Activity Monitoring

    Posted Jul 20, 2010 01:23 AM
    Hi
    Is it possible to track the activities of the users accessing the DLP console? Like the incidents opened, escalated or dissmissed. I would also like to track the activities of the Administrator.

    -Anamika


  • 2.  RE: User Activity Monitoring

    Posted Jul 20, 2010 02:21 AM
    At the moment it is not possible to track every incident opened.
    The concept is that you trust the people the you give access to the DLP console, You could also show certain incidents to certain types of people By managing Roles.
    Still, I have raised a feature request regarding the issue you are speaking of.
    You could vote on the feature and who knows, it might be implemented in the future.
    https://www-secure.symantec.com/connect/idea/mask-credit-cards-and-other-confidential-data-dlp-gui

    Kind Regards,
    Naor Penso


  • 3.  RE: User Activity Monitoring

    Posted Aug 03, 2010 05:42 PM
    A partial solution may be that whenever a user actually makes a change to an incident, such as modifying status, severity, or attributes, a notation is made in that event's history. Filtering your report view by "Incident History Issuer" for the user in question, and perhaps by "Incident History Detail", can give you some of this...