ビデオヘルプ

Send E-mail Notification to Managers with Detail Content

作成: 29 Jan 2013 | コメント数: 4

Hi ,

    Is it possible to send e-mail to manager when incident happened, and the e-mail's content include the incident snaphots?

    I know there is a $INCIDENT_SNAPSHOT$ to be a link, how about snaphots ?

Wayne Chen

タグでディスカッションを検索:

コメント コメント数: 4最新のコメントを表示

kishorilal1986 の写真

Hi Wayne ,

yes, It is possible for this. u must need to integrate the DLP with AD and activate smart responce rule to send email notifiaction to manager. This u  will find at policy rule in manage>Policy list ......

Please refer below link u will get better idea.

https://www-secure.symantec.com/connect/forums/inc...

http://www.symantec.com/connect/forums/dlp-inciden...

https://www-secure.symantec.com/connect/articles/s...

jgt10 の写真

Wayne,

While LDAP/AD is the best way to to do it, it is also possible to use a flat file of user id to manager email address.

JGT

--
John G. Thompson
JOAT(MON)

DLP Solutions2 の写真

I think you are referring to something else..

If you want to send an email to the ALREADY found manager through AD integration..

Can the EMAIL contain the actual incident details?

The answer is NO..the reason why is as follows:

  • From a security perspective you DO NOT want to send any of the cpatured data outside of the system. You would be just proliferating the loss of data through internal email.
  • This is why reports are "suggested" to be links to the DLP console, so authentication has to happen for the "RIGHT" person to see the data.

Keep in mind that the idea of the DLP workflow is to provide as much information on the incident in the email, but still enforce the security of the Encrpyted DB to store all of the important data.

Please make sure to mark this as a solution

to your problem, when possible.

kishorilal1986 の写真

Agree with DLP solution but ultimately when you sent link notification to manager then he will access all information related to thet specific incidents. It has to be given access to the manaher to investigate the incidents so it must be sent out to manager eithre incident links or incident snapshot.You can proceed to sent notification with above suggestion since manager needs above incident data for investiagtion.