Data Leak Prevention node
Show all | Hide all
The DLP Module status section provides information on the current status of the DLP Module and errors encountered during the operation of the DLP Module on Security Servers of your company.
This section contains the following information:
This section also lets you configure the email addresses of Security Officers.
Configure notifications
Clicking this button opens a window. This window lets you specify the email addresses of Security Officers. The application sends information about the status of the DLP Module, new incidents, and DLP Module operation reports to these addresses.
The Opened incidents section lets you view statistics on currently existing incidents with New and In progress statuses.
The following information is displayed in the upper part of the section:
- Violators. The number of unique senders. Incidents generated while scanning messages of these senders, which currently have New or In progress status.
- New incidents. The number of currently existing incidents with New status.
- Incidents under processing. The number of currently existing incidents with In progress status.
- Opened high-priority incidents. The number of opened incidents (in percentage points) to which High priority has been assigned. This setting reflects the current severity level. The severity level can have the following values:
- 0%-25%. Low. Highlighted in green.
- 25%-50%. Medium. Highlighted in yellow.
- 50%-75%. High. Highlighted in red.
- 75%-100%. Critical. Highlighted in black.
- Top 3 violators. A list of three senders. Messages from these senders have violated the largest number of policies, and incidents generated as a result of policy violations by these messages have New or In progress status.
A chart showing the number of incidents with New and In progress status calculated for each category is displayed in the lower part of the section. Data belonging to all categories is included in the chart by default. You can modify the list of categories for which the chart is created by clicking the Select categories button.
Select categories
Clicking this button opens a List of categories window. This window lets you select the categories whose data will be factored in by the application when creating the chart of opened incidents.
The Statistics section lets you obtain information about messages processed and scanned and on the number of incidents closed during the reporting period. The reporting period can be either 7 days or 30 days.
The upper part of the section contains the following information:
- Messages processed. Number of messages processed by the DLP Module.
- Messages scanned. Number of messages that fall into the scope of policies and have been scanned by the DLP Module.
- Messages skipped due to timeouts. Number of messages that have not been scanned due to timeouts.
- Messages skipped due to errors. Number of messages that have not been scanned due to errors, including licensing errors.
- Incidents created. Number of incidents generated.
Reporting period
A section with two links that let you select the reporting period: 7 days or 30 days. The application displays statistics and creates charts on the basis of data received over the selected reporting period.
The lower part of the section includes a chart showing the number and percentage of incidents with Closed (processed), Closed (false positive), Closed (not an incident), Closed (other) status, which were generated during the selected reporting period. Incidents associated with all categories are included in the chart by default. You can change the list of statuses by clicking the Select categories button. Restored incidents are also reflected in the chart.
Select categories
Clicking this button opens a List of categories window. This window lets you select the categories whose data will be factored in by the application when creating the chart of closed incidents.