DLP

Assign DLP License

This feature allows you to assign Data Loss Prevention (DLP) license to the selected endpoint.
To assign the DLP license, follow these steps:

1. On the Status page, select the endpoints you want to assign the DLP license.
2. The client action bar is enabled above the table. In the Client Actions list, select DLP.
3. In the Please Select dropdown, select Assign DLP License.
4. Click Submit.
5. A confirmation message appears. Click OK.
   The DLP license is assigned to the selected endpoint. On the Status page, the legend for DLP License Assigned is displayed for the respective endpoints.

Revoke DLP License

This feature allows you to revoke the DLP license to the selected endpoint.
To unassign the DLP license, follow these steps:

1. On the Status page, select the endpoints you want to unassign the DLP license.
2. In the Client Actions dropdown, select DLP.
3. In the Please Select dropdown, select Revoke DLP License.
4. Click Submit.
5. A confirmation message appears. Click OK.
   The DLP license is unassigned to the selected endpoint.

   Data-At-Rest Scan

   Using Data-At-Rest Scan, you can scan and detect any confidential data present in your endpoints and removable devices. You can scan the desired location such as; drive, folder, or removable devices on the endpoints and detect the confidential or sensitive information present. You can view the information related to the detected confidential data such as; the file path, threat type, and matched text.

   Note
   To perform Data-At-Rest scan, you must enable DLP on the endpoints.

Start Data-At-Rest scan

To initiate scanning, follow these steps:

1. On the Status page, select the endpoints you want to scan.
2. The client action bar is enabled above the table. In the Client Actions list, select DLP.
3. In the Please Select dropdown, select Start Data-At-Rest Scan.
4. Click Submit.
   Start Scan dialog appears.
   Click Start Scan to start the scan of the selected endpoints. The action will be initiated on the client as per set polling interval.
   The selected endpoints are scanned for compliance.
   You can customize the Data-At-Rest scan settings if required.

Customize the DAR scan settings

1. To customize the DAR scan settings, click Data-At-Rest Scan Settings and select one of the following:
   • Quick Scan: Select this option to scan the drive on which your operating system is installed.
   • Full System: Select this option to scan all the drives.
   • Scan Specific Folder(s): Select this option to scan a particular folder(s). To scan specific folder, follow these steps:
     1. Click Configure.
     2. Enter the path of the folder that you want to scan.
     3. Click Add.
     4. You can also choose to scan the subfolders by selecting the Include Subfolder check box.
     5. You can also remove a path from the list by clicking Delete.
     6. Click Apply.
2. Select Scan Priority. The Scan Priority is Normal by default. You can change the priority to Low or High, if required.
3. In the Select data to scan section, click the File Types tab.
4. Select the file types (format) that you want to scan.
5. Click the Confidential Data tab.
6. Select the Confidential Data to scan.
7. Click the User Defined Dictionaries tab and select the User Defined Dictionaries to scan.
8. Click Apply Changes.
9. You can reset the DAR scan settings to default with Reset button, if required.
10. Click Start Scan.
    

    Note
    Email Notifications are not supported for Data-At-Rest Scan feature.
    Data-At-Rest Scan feature will be available only if DLP feature pack is enabled for that EPS server.

Exclusion

You may exclude folders for scanning.
To exclude the folder, enter the name of the folder in the text box and click Add.
To remove the folder from the excluded folders list, select the folder from the list and click Delete.

Stop Data-At-Rest scan

To stop Data-At Rest scanning, follow these steps:

1. On the Status page, select the endpoints you want to stop Data-At-Rest scan.
2. The client action bar is enabled above the table. In the Client Actions list, select DLP.
3. In the Please Select dropdown, select Stop Data-At-Rest Scan.
4. Click Submit.
   The Stop command has been sent.