Is it possible to see what actions DLP took on a CASB Cloud incident in the console?
search cancel

Is it possible to see what actions DLP took on a CASB Cloud incident in the console?

book

Article ID: 237104

calendar_today

Updated On:

Products

Data Loss Prevention Enterprise Suite

Issue/Introduction

Is it possible to see what actions DLP took on a CASB Cloud incident in the console?

Environment

Release : 15.8, 16.x

Component : Default-Sym

Resolution

DLP history tab in the incident will show that a DLP response rule was triggered and can show what action was requested from the SAAS app, although we don't see the confirmation from the SAAS app typically that the action completed successfully.  

 

You can also check CASB's investigate tab which can show some relevant information on it.