Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Services > Risk-Adaptive Protection
Risk-Adaptive Protection
Administrator Help | Forcepoint DLP | Version 8.7.x
Risk-Adaptive Protection is a feature that is built upon existing Forcepoint FBA and Forcepoint DLP technologies.
Risk-Adaptive Protection combines the power of the Forcepoint DLP and Forcepoint FBA technologies by ingesting DLP event and incident data into the FBA platform, which performs modeling and analytics to determine a user profile risk. Then, based on the user risk level, actions are executed when Forcepoint DLP polices are triggered.
To enable the feature:
1.
Deploy a Forcepoint FBA instance. See Forcepoint FBA Administration and Troubleshooting Manual.
2.
Enable Risk-Adaptive Protection in Forcepoint DLP. See Configuring Risk-Adaptive Protection.
3.
Configure relevant policies and rules so that actions are risk-level dependent. See Custom Policy Wizard - Severity and Action.
4.
Enable/Disable Risk-Adaptive Protection for specific users/groups. Use the RAPUserManager.exe. See the Dynamic Data Protection Getting Started Guide for more information.
5.
Users could be either custom or based on a user directory.
Users are assigned risk level 1 as a default risk level value.
6.
Sync the modified list of Risk-Adaptive Protection users in the Forcepoint FBA system. See Forcepoint FBA Administration and Troubleshooting Manual.
7.
Check DLP incidents. See Managing incident reports.
8.
Investigate users. See Forcepoint FBA Administration and Troubleshooting Manual.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Services > Risk-Adaptive Protection
Copyright 2020 Forcepoint. All rights reserved.