Documentation
|
Support
General System Settings
>
Services
> The RAP service
The RAP service
Administrator Help | Forcepoint DLP | Version 8.5.x
Risk Adaptive Protection (RAP) is a product offering that is built upon existing UEBA and DLP technologies.
The RAP feature combines the power of the DLP and UEBA technologies by ingesting the DLP event and incident data into the UEBA platform which performs modeling and analytics to determine a user profile risk. Then, based on the user risk level, controls are triggered to affect user interactions with sensitive data.
To enable the feature:
1.
Deploy a UEBA instance. See Forcepoint UEBA Administrator Help.
2.
Enable RAP in DLP. See
Configuring the RAP service
.
3.
Configure relevant policies and rules so that actions will be risk-level-dependent. See
Custom Policy Wizard - Severity and Action
.
4.
Enable/Disable RAP for specific users/groups. Use the RAPUserManager.
Users could be either custom or user directory one
s.
Users get risk level 1 as a default risk level value.
5.
Sync the modified list of Risk Adaptive Protection users in the UEBA system. See Forcepoint UEBA Administrator Help.
6.
Check DLP incidents. See
Managing incident reports
.
7.
Investigate users. See Forcepoint UEBA Administrator Help.
General System Settings
>
Services
> The RAP service
Copyright 2017 Forcepoint. All rights reserved.