Using the Self-Service Portal to manage Data Loss Prevention (DLP) incidents


Using the Self-Service Portal to manage Data Loss Prevention (DLP) incidents
Prev	Using the Self-Service Portal	Next

You can use the Self-Service Portal to remediate incidents on the paths that are assigned to you. On the DLP Incident Remediation page of the portal, you can do following tasks:

View a snapshot of the number of files that are assigned for your attention. The files are sorted according to the severity of incidents that are associated with them.
Filter the list of files based on the severity of the incidents that the files have violated, the recency of the last access date, or the DLP policy that the files violate. The filters available to you depend on the options that are selected when configuring the workflow template.

The different filters are applied together, and the list is filtered to show the data that matches the applied criteria.
Perform a configured action on multiple files at one time. The available actions are DLP Smart Response rules configured in DLP. You can select more than one file from the list and then choose the desired action.

To remediate the files

Select the files that you want to remediate.
You can choose to filter the list of files using the filter criteria at the top of the page. For example, you can prioritize the remediation of files that are associated with high severity incidents that violate a particular policy. Files that match the selected filter criteria are listed. Select the desired files from the list.
From the Select Action drop-down, select the action that you want to take on the selected files. For example, you may quarantine the files or mark the files for deletion. The listed actions are the Smart Response rules that are configured within DLP.
For more information about Smart Response rules, see the Symantec Data Loss Prevention Administration Guide.
Click Submit to send the remediation request to the Data Insight Management Server for further action.
On submission of the request, the actions that you select are sent to the Data Insight Management Server, which in turn requests the Response Rule Execution Service running on the DLP Enforce Server to execute the response rules. You can view the status of the workflow on the Data Insight Management Console.

Prev	Up	Next
Using the Self-Service Portal to review user entitlements	Home	Using the Self-Service Portal to confirm ownership of resources