Data Loss Prevention

Hello,

I have recently begun a mission, for my company, on Symantec Data Loss Prevention solution (v12.5.1), and I have some questions about it.

My mission: develop a web application (HTML) reproducing the enforce console interface of DLP, applying access filters per user (a manager connected could see only incident about his department / direct reporters…, not the totality of all incidents). The interface filtering capabilities are not enough extended to perform such thing (filtering by manager email or sender email is a nightmare to maintain manually). The release or block response rules of emails will be triggered via the interface through FlexResponses (we have Symantec Mail Gateway in place).

However, I’ve really no idea how to start building the architecture and correctly use the API in the project

If you have experience with using the DLP APIs and could share your feedback this would be more than welcome!

Many thanks & regards

Hello,

Web Services API is enabled by deafult howver but u need to configure and give access setting to it.

The Incident Reporting and Update API is a Web service that allows client applications to read and update incident data stored in a Symantec Data Loss Prevention deployment. The API is available with Symantec Data Loss Prevention version 11.6 and later.

Check these Articles:

Complete Process of Deploying and Enabling of Endpoint FlexResponse plug-in

https://www-secure.symantec.com/connect/articles/complete-process-deploying-and-enabling-endpoint-flexresponse-plug

Modifying DLP IncidentSeverity FlexResponse Plugin

https://www-secure.symantec.com/connect/forums/modifying-dlp-incidentseverity-flexresponse-plugin

Configuring the Symantec Data Loss Prevention Connector

http://www.symantec.com/business/support/index?pag...

Incident Reporting and Update API Example Clients version 12.5

http://www.symantec.com/docs/TECH219912

Hope that helps!!

Yeah in fact, that could be help me :)

So i need to connect this webservice, to mine, and like that, i could use all informations of API's DLP ?

Thank you :)