When you summarize by policy rule, the detection rules are listed twice
search cancel

When you summarize by policy rule, the detection rules are listed twice

book

Article ID: 219192

calendar_today

Updated On:

Products

Data Loss Prevention Enterprise Suite

Issue/Introduction

Selecting summarize by policy rule,results in the detection rules being listed twice.

Environment

DLP Enforce

Cause

There are several criteria which will cause detection rules to be duplicated in that view.  In summary, different policy versions with different policy complexities (i.e. a policy version with a certain data identifier, and another policy version with the same data identifier and a protocol rule) will be moved to different lines when you summarize by policy rule. Likewise, two different policies which have the same detection rule will also be separated out onto separate lines in the summarization page.

Resolution

This is expected behavior for DLP and does not indicate any failure on the console.