CloudDLP does not show any incidents from DLP ICAP CDS

Products

• CASB Gateway Advanced
• Data Loss Prevention Cloud Detection Service for ICAP
• Management Center
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

You have integrated Cloud DLP with DLP CDS ICAP, and prepared policy, but you are not seeing any incidents created.

Environment

Cloud DLP with DLP ICAP connector and Management Center

Cause

Cloud SWG customer can manage their policy in one of two mode.

Poral Managed policy will offer a source selector in the DLP configuration:

UPE / Management Center managed policies will not offer a source selector in the DLP configuration. The source selection has to be done in Management Center:

Resolution

For UPE customer the Management Center policy should have a rule to send selected sources to DLP using the reference proxy DLP ICAP action.