Data Loss Prevention

 View Only

  • 1.  Whitelisting URLs from Endpoint Monitoring in Symantec DLP

    Posted Jan 10, 2014 02:50 AM

    Hi,

    I would like to know if there is a provision to whitelist certain URL's(internal) from endpoint monitoring.

    Example:

    If a user is uploading some document on a local sharepoint site, then an alert for the same is not required in the console. Ultimately the false positives will be reduced.

     



  • 2.  RE: Whitelisting URLs from Endpoint Monitoring in Symantec DLP

    Broadcom Employee
    Posted Jan 10, 2014 07:52 AM

    You can add this local sharepoint site into the Domain Filters under the agent configuration.

    Just as the screenshot below:

    Endpoint_Configuration_HTTP_Filter.png

    Here is an example of the syntax of the filter:

    -sales.symantec.com,+*symantec.com,*

    HTTP requests to sales.symantec.com are ignored, and all of the requests that are sent to any other symantec.com domain are inspected. The last asterisk in the filter filters out all other domains like www.xyz.com. 



  • 3.  RE: Whitelisting URLs from Endpoint Monitoring in Symantec DLP

    Posted Jan 11, 2014 12:31 AM

    Hi,

    Thanks for your valuable comment. Let me try this out.

    :)