In reporting for ICA, a report can be executed, providing results of keywords that have activated specific DLP rules. But the specific keywords cannot be identified for report purposes. Why?
Keyword matches are stored as encrypted data in DLP
Keyword matches are stored as encrypted data in DLP, and currently there is not technology to decrypt the specific key words that activated a particular rule. This has been added as a feature request for future release.