Veritas Data Insight Administrator's Guide

To configure Data Loss Prevention settings

1. In the Management Console, click Settings > Data Loss Prevention.
2. Click Edit, and enter the following details:

   • Hostname /IP address of DLP Server

     The host name or IP address of the DLP Enforce Server. DLP host names are case-sensitive.

   • Port

     The port through which Data Insight connects to the DLP Enforce Server.

     The default port number is 443.

   • Username

     The user name of the account that is used to access the DLP Enforce Server. DLP user names are case-sensitive.

     Note:

     Ensure that the credentials belong to an existing DLP user assigned the Incident Reporting and Update API role. Also ensure that when assigning a role to the user, the Display Attribute Location is selected. This attribute allows Data Insight to view the complete path of a file.

     The user credential being used must have access to DLP Network Discover scan data and DLP Saved Report IDs.

   • Password

     The password of the account that is used to access the DLP Enforce Server.

   • Domain

     The name of the domain to which the user belongs. DLP domains are case-sensitive. Specifying the domain is optional for a user who is a DLP administrator.

   • DLP Role

     Specify the role you want to use to log on to DLP. DLP roles are case-sensitive.

     Users who are assigned more than one role can only log on under one role at a time.

   • Configure storage resources automatically

     By default, Data Insight discards classification information for paths on storage devices that it does not monitor. Select this option to add the unmonitored devices as generic devices in Data Insight and include classification information for all paths on those devices. Note that only data classification information is available for the paths. To enable Data Insight to get audit and metadata information for the paths, you must manually configure the devices in Data Insight.

   • Saved Report IDs

     Enter a comma-separated list of Saved Report IDs in DLP.

     Data Insight fetches classification information for all the paths present in the DLP Saved Report. Data Insight uses the DLP Reporting API Web service to request a list of incident IDs by specifying a saved report ID. A Data Insight process then fetches the sensitive files corresponding to the incident IDs.

3. Click Test Connection to verify the connection to the DLP Enforce Server.
4. Click Save to save the settings.