A new feature, Incident Tasks, is included as a tab in the Incident Manager for DLP Endpoint. Use this feature to:
- Set criteria for scheduled tasks.
- Set email tasks - set up the email details such as recipients, subject, and body, and define the criteria that would trigger the email.
NOTE: The Incident Tasks tab works with ePO Server Tasks to schedule tasks. A server task is created when DLP Endpoint is installed. The task name is DLP Send Email for Operational Events and Incidents for DLP Endpoint 11.x.
IMPORTANT: Before you perform the following task, you must configure the mail server settings in your ePO server from where the emails are sent.
Configure the email (SMTP) server in Server Settings:
- Click Menu, Configuration, Server Settings.
- Specify the email server from where the notification messages are sent.
Configure email notification for DLP-related events:
- Click Menu, Data Protection, DLP Incident Manager.
- Click the Incident Tasks tab.
- Click Actions, New, Mail Notification Task.
- Enter details for the listed entries such as Name, Description, State, Recipients, Subject, and Body.
- Insert the variables for Subject and Body.
- Select Attach Evidence CSV if you want information about the evidence provided.
- Define the criteria under the Available Incident Properties section, based on how you want the report to appear.
NOTE: In DLP, a server task named DLP Send Email for Operational Events and Incidents exists. You can change the schedule on this server task as needed.
