Symantec Data Loss Prevention v2

Symantec Data Loss Prevention version 15.7 enables you to discover, monitor and protect your sensitive corporate information.

Category

Network Security

Pack

SymantecDLP

Configuration parameters

• server — Enforce Server (e.g. https://192.168.0.1) (required)
• credentials — Username (required)
• first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• max_fetch — Fetch limit
• fetchIncidentType — Fetch incidents from type
• incidentStatusId — Incident Status ID
• incidentSeverity — Incident Severity
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• isFetch — Fetch incidents
• incidentType — Incident type
• incidentFetchInterval — Incidents Fetch Interval
• incidents_time_zone — Incidents Time Zone

Commands (14)

• symantec-dlp-get-incident-details — Returns details of the specified incident.
• symantec-dlp-get-incident-history — Returns the history of the specified incident.
• symantec-dlp-get-incident-original-message — Fetches the original message from an incident. Requires SDLP 15.8.
• symantec-dlp-get-message-body — Returns the message body from the Enforce console by incident ID. Requires SDLP 16.0.
• symantec-dlp-get-report-filters — Retrieve the filter criteria for a saved search in the Enforce console by report ID. Requires SDLP 16.0.
• symantec-dlp-get-sender-recipient-pattern — Returns a sender/recipient pattern. Requires SDLP 16.0.
• symantec-dlp-list-incident-status — Returns a list of the custom status values defined in the Symantec DLP deployment.
• symantec-dlp-list-incidents — Returns a list of incidents.
• symantec-dlp-list-remediation-status — Returns a list of the remediation status values defined in the Symantec DLP deployment.
• symantec-dlp-list-sender-recipient-patterns — Returns a list of all sender/recipient patterns from the Enforce console. Requires SDLP 16.0.
• symantec-dlp-list-users — Returns details for all SDLP users from the Enforce console. Requires SDLP 16.0.
• symantec-dlp-update-incident — Updates the details of a specific incident.
• symantec-dlp-update-recipient-pattern — Updates a recipient pattern in the Enforce console. Requires SDLP 16.0.
• symantec-dlp-update-sender-pattern — Updates a sender pattern in the Enforce console. Requires SDLP 16.0.