Forum Discussion
Solved
Overrides and false positives in DLP policy end user experience
Ok so a user gets a policy applied to his/her document for let's say PCI compliance. On the policy tip we give the user the option to override with a business justification or to report as a false p...
- No I'm not able to; I don't think you can.
If someone does put down it's a false positive and it's not, I usually go and speak to the individual or email them. There's no way that I know of to reclassify it.
I also have alerts turned on to me when people do it so when I get the email, it shows the override reason and false positive answers. If anyone puts anything that we don't agree with as being an acceptable answer, then we raise this with them/their line manager.
I've had this issue too; you don't actually get report as far I am aware. However, if you go to the DLP page and click the graph called DLP false positives and overrides, you can then see a graph of both results and change it to the actual details. You can also request a report of this information which will appear in the reports area.
One thing to note is if you're not a domain admin and just compliance, you cannot schedule reports to come out automatically. Only a domain admin can do it and they only are visible to them (we tried this and my colleague only got the reports, not me; I have to get them manually).
Hope this helps
One thing to note is if you're not a domain admin and just compliance, you cannot schedule reports to come out automatically. Only a domain admin can do it and they only are visible to them (we tried this and my colleague only got the reports, not me; I have to get them manually).
Hope this helps
"you can then see a graph of both results and change it to the actual details" - could you attach a screenshot of what you mean? My graph (and report) are both decidedly non interactive!!