Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Policies Overview > Selecting items to include or exclude in a policy
Selecting items to include or exclude in a policy
Administrator Help | Forcepoint DLP | Version 8.5.x
A selector tool is used to select the items to include in a DLP or discovery policy, such as sources, destinations, channels, and actions, among others. For most operations—selecting application names, content classifier names, or files, for example—the selector looks like this:
Use the selector to specify which entities to include in the rule and which to exclude. If, for example, you want users in the Finance group to be able to move, copy, and print corporate financial data in the /finance directory, select the Finance group with the Sources selector and the /finance directory with the Destinations selector.
When there is an exception, add it to the exclusions list. If, for example, user bsmith is a member of the Finance group, but should not have access to the /finance directory, r, you would add user bsmith to the exclusions list.
A rule can have multiple exclusions.
To use the selector, complete the fields as follows:
Field
Description
Display
Select the entity—such as computers or networks if you are selecting a source—to display in the Available List box at the bottom of the page.
If you do not see what you want to display, in some cases you can create a new resource by clicking the "new" icon to the right of the field.
See Defining Resources for instructions.
Filter by
Typically, too many entries are available to display on one page. Use the Filter by field to specify criteria for filtering the list. If you enter "jones", the system searches for any entry that contains the string "jones". It is equivalent to searching "*jones*".
You can use additional wildcards in your filter string if desired. For example, "?" represents any single character, as in the example "file_?.txt".
Click the search icon to filter the data.
Available items
Lists the items that are available for selection in the current display category. Use the page forward/backward controls to navigate from one page to the next, or to the first or last page.
In some cases, a folder icon or up arrow appears. Click the icon to display the directory one level up in the directory tree. You can also click the breadcrumbs above the list to navigate to another level.
If you chose Directory Entries in the Display field, hover over an item in this list to see all the fields that will be searched—login, full name, domain name, and email address.
Selected items
Use the right and left arrows to move items into and out of the selected list. If you want to include a computer named Bob_Computer, then highlight it on the left. Make sure the Include tab is active, and then click >. If you want to exclude Bob_Computer, make sure the Exclude tab is active when you click >.
If you select more than 1500 items, you receive an error message. Consider creating a business unit to add more items to the Selected box.
Tip: you can move a group of users, computers, networks, etc. into the Include box, then remove one user, computer, or network by highlighting it on the right and clicking Remove.
When you are selecting sources or destinations, you can either select items from predefined lists, or enter free text to identify the items to include in the policy.
On the sources and destinations selector:
1.
From the drop-down list box, select one of the following:
*
Use Predefined lists to select from lists.
*
Use Free text to type the name of an item to include.
2.
If you choose Predefined lists, complete the fields described above.
If you choose Free text, use the space provided to specify the entity to include:
When selecting a source, for example, to select an owner, type the corresponding email address. To select a computer, type the hostname or IP address.
*
Optionally enter multiple items in a comma-separated list. For example:
ssmith@example.com, mjones@example.com
*
By default, the system searches for all entities containing the word or words you enter. For example, if you type "jones" for policy owner, it might return mjones@example.com, jjones@acme.com, and sjones@abc.com.
Entering "jones" is equivalent to searching "*jones*". Additional wildcards are allowed.
3.
Click OK.
 

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Policies Overview > Selecting items to include or exclude in a policy
Copyright 2017 Forcepoint. All rights reserved.