DLP policy matches report

Occasional Visitor

Hello Guys,

 

We recently set up 3 DLP policies in test mode with 1 rule each . However we observed as below

 

1. The number of matches changes each time we refresh the report . Also the number vary a lot , sometimes it increases by 200 and sometimes decreases too. What could be the cause for same

 

2. The report shows a particular file matching multiple rules in the report . As per my understanding in case of multiple matches a file will match to only one rule/policy based on priority set

 

3. When i filter DLP policy matches report by a specific rule/ policy i still see rules appearing other than i have filtered.

 

Have you guys also observed the same and what is the logic behind the same 

0 Replies