Verifying DLP policy changes in ICA

Products

• Information Centric Analytics

Issue/Introduction

After either creating a new policy or modifying an existing policy in Symantec Data Loss Prevention (DLP), what method can be used to confirm these changes are reflected in Information Centric Analytics (ICA)?

Environment

Version : 6.x

Component : Symantec DLP Integration Pack

Resolution

DLP policy updates and additions are processed in ICA independent of the existence of incidents generated against those policies; however, if there are no incidents tied to a DIM Policy dimension in ICA's Analyzer, the policy will not be visible if used in conjunction with the DIM Incident Count measure. To verify policy updates (e.g., name changes) using the Analyzer, use the DIM Policy Count measure after running either the RiskFabric Processing job or the RiskFabric Intraday Processing job.