Data Loss Prevention

On 14.5, its possible to create a report with both network & endp. incidents? Thanks

Hello,

AFAIK that's not possible. Only one channel is available for each Report.

Cheers,

Morgado

Sorry this is marked as solved but disagree a bit on this.  THe User Risk Reporting section will cover both Endpoint and Email reports if you have the username populated from Active Directory.  What the User Risk Reporting will do will group EMAIL and ENDPOINT incidents together.  I blogged about it awhile ago: https://jjesse.wordpress.com/2014/03/13/configuring-user-risk-reporting-in-symantec-dlp/

I hope that helps.

If that's not what you are looking for IT Analytics can help out with this

+1 to Jonathans post.

ITA is a terrific tool to present the data in the Oracle database in ways that the DLP console cannot.  Some features of ITA;

1. It's FREE
2. It's non-destructive to data in the Oracle database
3. It's FREE
4. You can grant privileges to users in ITA without giving them access to the DLP console
5. It's FREE
6. As mentioned above, you can slice-n-dice the data in ways that the DLP console cannot
7. It's FREE
8. It can be a way to combine reporting from separate DLP installations
9. It's FREE
10. Other SYMC security products (SEP, CSP/DCS) can be configured to connect to ITA giving added reporting and analytics to those tools as well.

IMHO, ITA should be a part of EVERY deployment of DLP (or SEP, or DCS).

Hi Will V,

Would you have any documents for installing IT Analytics for DLP? It does not come together with the software on fileconnect.

Regards,

Diego B. Baptista