Viewing the Dashboard

Administrator Help | Forcepoint DLP | Version 8.7.x

By default, the Dashboard opens every time an administrator accesses the Data Security module of the Forcepoint Security Manager. This page shows a comprehensive view of top Incident Risk Ranking cases, data loss prevention incidents, and discovery incidents over a specified time period.

From the Dashboard, administrators can see any system health alerts and act on them quickly and easily. Administrators can also view incidents by hostname and policy category to find out where the greatest risks lie.


	Note The page displays only incidents that the current administrator is authorized to view. Adobe Shockwave Player is required.

Health Alert Summary

The summary at the top of the page shows subscription information, system messages, configuration gaps, and deployment updates.

Click on an alert to see further information or take action. For example, if the Health Alert Summary is displaying missing essential configurations and actions, click the link to see further details and direct links to the required fixes.

Business Value

Review the approximate amount of data collected over the last 24 hours:

Inspected Web traffic shows the number of web transactions (including posts) analyzed, and the cumulative volume of the traffic in megabytes.

Inspected email messages shows the number of email messages analyzed, and the cumulative size of the messages in megabytes.

Inspected mobile device messages shows the number of email messages that were analyzed when being sent to mobile devices from network Exchange servers, and the cumulative size of the messages in megabytes.

Discovery inspected items shows the number of files plus the number of database chunks scanned using network discovery, and the cumulative size of these items in megabytes. (A database chunk is approximately 5000 records.)

Connected endpoints shows the number of endpoint clients connected to the system.

Synchronized mobile devices shows the number of mobile devices that have synchronized with the mobile agent in the last 24 hours (may be fewer than the number of registered devices).

Data Loss Prevention Incidents

See the number of data loss prevention incidents that have been detected in the last 24 hours, as well as the following graphs:

Incident Risk Ranking - Top Cases shows any cases found in the network with risk scores that exceed a configurable threshold.

Cases are groups of related incidents that, combined, indicate a risk to the organization.

Cases are assigned risk scores based on sophisticated security analytics.

The displays uses the risk threshold set on the Settings > General > Reporting > Incident Risk Ranking tab.

Click the chart to view details on each case.

Incident Risk Ranking - Top Cases (last 7 days) displays the number of cases above the risk threshold detected during each of the last 7 days. The height of the bars and the value shown inside represent the number of the risky cases for each date.

Click a bar to drill down to the Incident Risk Ranking report for the selected date.

Incidents by Severity displays the number of incidents that have entered the system in the last 24 hours by severity. These include all incidents that the system has detected.


Field	Description
High	Number of incidents that have been set to the most severe setting and should be handled immediately.
Medium	Number of incidents that have been set to the medium severity setting and should be handled soon.
Low	Number of incidents that have been set to the most lenient severity setting and should be handled.

Top 5 Policies displays the policies that had the most incident violations, and the number of incidents in each of these policy categories.

The Last data loss prevention incident field provides the exact date and time the last incident was logged in Forcepoint DLP.

Click the My data loss prevention incidents link to open the incident summary page, where administrators can view and manage their assigned incidents.

Discovery Incidents

See the total number of discovery incidents detected by a Forcepoint Data Discovery scan, as well as the following graphs:

Top 5 Hosts displays the top 5 violating hosts and the number of incidents detected on these hosts broken into categories of urgency. (See above.)

Top 5 Policies: displays the top 5 policy categories that were violated, and the number of incidents discovered for these policy categories.

The Last discovery incident field provides the exact date and time the last incident was logged in Forcepoint DLP.

Click the My discovery incidents link to open the incident summary page, where administrators can view and manage their assigned incidents.