cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
256
Views
0
Helpful
1
Replies

DLP Report on ESA

rushispace
Level 1
Level 1

I am beginner in ESA i have Model : Cisco C390 Version: 15.0.0-104 I need to schedule the DLP report on ESA.

In this report i need to get details of Sender ID, Recipient ID and which DLP policy is trigger while sending mail.

1 Reply 1

msaalim
Cisco Employee
Cisco Employee

Hello,

You have the option to set up a scheduled report within the ESA or SMA by choosing the 'DLP Incident Summary' report type. This report will provide you with an overview of the top DLP Policy matches and a summary of incidents. However, it's important to note that this report does not contain information about the sender or recipient's address. To obtain these details, you can export data from message tracking. Make sure to apply a filter for "DLP Violations" under the advanced options to get the specific information you need. I hope this information proves useful to you.