Data Loss Prevention

 View Only
  • 1.  How to get the access history of all the DLP user?

    Posted May 03, 2017 05:52 PM

    Is there a way to use the Enforce tool to get a history of all users who logged into the DLP for a specified period? The goal is to disable users who have access DLP in recent months.

    What the best or easiest way to accomplish this?

    Thank you



  • 2.  RE: How to get the access history of all the DLP user?
    Best Answer

    Trusted Advisor
    Posted May 04, 2017 01:42 AM

    hello,

     There is two different ways :

    - use tomcat logs, as on each line you will have user who perfom action (and with which role)

    - extract auditlog table event on connection sucess (or failure)

     This information of "last access date" is not available directly in DLP web interface. (it may be if you have IT analytics plugged on your DLP).

    regards



  • 3.  RE: How to get the access history of all the DLP user?

    Posted May 04, 2017 03:13 PM

    Thank you Stephane.

    I liked the section option: - extract auditlog table event on connection sucess (or failure)

    select * from auditlog where time > sysdate -90 and entity='Login'