Problem with user groups in web policies

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Network Prevent for Web
• Data Loss Prevention Core Package

Issue/Introduction

Products: Data Loss Prevention Enterprise Suite, Data Loss Prevention Network Prevent for Web

We have a problem regarding applying policy per user group on Network prevent for web although it works fine with Network prevent for Email.
and policy works fine if we didn't choose any user group in network prevent for web policies.This is a Three tier installation.

Environment

 

Component : Data Loss Prevention Enterprise Suite  

Resolution

Regarding to the user group issue, Network Prevent for Web generally have IP address in Sender field as there is no directory user authentication configured on the source Proxy Server to provide the domain and username of the Sender.

If directory authentication were configured on the Proxy Server then the Proxy Server can send the domain and username instead of the IP address.

In which case you will likely need to consider using a combination of a CSV and LDAP lookup or otherwise a customized Script Lookup.

Additional Information

Note: We do not provide support to configure the directory user authentication on the Proxy server or creating a customized Script Lookup.