Mobile device settings

Administrator Help | Forcepoint DLP | Version 8.5.x

Related topics:

Configuring the mobile agent

Configuring the Mobile DLP Policy

Viewing endpoint status

The mobile agent makes it possible to configure what type of email content to sync to users' mobile devices when they connect to the network. If content breaches the mobile policy, it is blocked or audited as configured.

Use the Settings > General > Mobile page in the Data Security module of the Forcepoint Security Manager to define how Forcepoint DLP manages the mobile devices covered by policy.

Use the Keep released messages for field to specify, in days (3-30) how long to store released messages (14 days, by default).

When the mobile agent accepts a release operation for a specific message, it stores it for 2 main purposes:

To wait for the user's device to sync, which triggers the actual release sequence in Exchange.

To avoid any subsequent analysis for the same message by the same user syncing to a second device.

This number affects the size of your incident database. A large number requires more storage space than a small one.

Use the Update status every field to determine how often in minutes (1-60) device status is sent to the management server. The default is 5 minutes.

Status includes the device owner and type, date of the last synchronization, date of incident detection, and more.

Status from all registered devices is sent to the management server in a single batch operation.

Under Analyze the following components, indicate which Exchange server components you want the mobile agent to analyze:

Select Email messages to analyze all parts of an email message (Subject, Body, To, From, Attachments, etc.).

Select Calendar events to analyze calendar items, including Subject, Location, Attendees, and Description.

Select Tasks to analyze content in To-Do lists.

By default, all message types are analyzed.

Under Trusted Devices, define any devices that should not be monitored. These devices are not analyzed by Forcepoint DLP.

Select Enable trusted devices.

One by one, enter a user name and user agent for each trusted device, and then click Add.

The User name of the device user is case insensitive. Do not include the domain name. For example, enter jdoe rather than mydomain\jdoe.

If you leave this field blank, all people who use the device specified in the User agent field are trusted.

The User agent is a case-sensitive identifier used to identify the device operating system and email client software. Similar devices share the same identifier. If you leave this field blank, all devices for the specified users are trusted—for example, all mobile devices used by jdoe.

If the device is connected to an Exchange server, you can find the user agent string using an interface such as Outlook Web App (OWA).

Click Remove to remove a device from the trusted device list.

Click OK to save your changes.