How To: Create application detection scan filters for multiple CASB detectors on a single Enforce server

Products

• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package

Issue/Introduction

DLP added the ability to host multiple CASB detectors on a single Enforce, starting with version 16.x. With this new feature, the Enforce server now allows you to declare which CASB detector a scan filter will be assigned to. 

 

Note: 

Starting in version 16.x, you are now able to add additional detectors of the same type to a single Enforce, aka a second CASB detector with an existing CASB detector on the same Enforce. However, in order for this to work both detectors of the same type must be provisioned on the same customer account, and also in the same region. This currently does not work if detectors are in different regions, but this may be resolved in a future release. 

See: "Activating the DLP Cloud Service via the Cloud Management Portal (CMP)"

 

Environment

DLP 16.x+

Resolution

When creating a new or existing scan filter via "Manage > Application Detection > configuration", you will now see the option to select "Rest Detectors". This gives you the ability to apply a scan filter to one or more of the detectors enrolled to the Enforce. All Enrolled detectors will show up in the field indicated below: 

Also see "Managing Application Detection":