Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Services > Linking Service and mapping URL categories
Linking Service and mapping URL categories
Administrator Help | Forcepoint DLP | Version 8.8.2
The URL Categories tab of the Settings > General > Services includes two main functions: Getting URL category mapping using either Linking Service or importing from Forcepoint Web Security Cloud Portal, and using Linking Service to provide IP-address to user-name resolution for HTTP incidents.
*
Using Linking Service
*
Importing URL categories from Forcepoint Web Security
Using Linking Service
In addition to providing IP-address to user-name resolution for HTTP incidents, Linking Service allows Forcepoint DLP to import Forcepoint Web Security predefined and custom URL categories. These categories can then be added as resources in DLP policies so that you can map URLs to categories and view them in incident reports.
1.
Note the IP address and port of the Linking Service machine. This is added automatically during installation.
2.
Make sure that Enabled is selected.
3.
Click Test Connection to test the linking connection. A confirmation message is returned.
If connection fails, enter the IP address or hostname of the Linking Service machine, and the connection Port (56992, by default), then test the connection again.
 
* 
Note 
If the IP or port are invalid and the import fails, any currently existing categories already mapped are deleted. To correct this situation:
a.
Enter a valid IP and port, and then click OK.
b.
Click Deploy
c.
Go to Resources > URL Categories, and click Upload to get the most updated URL category list.
Dynamic user name resolution and category mapping are enabled by default when you install Forcepoint DLP. If you are experiencing significant latency during content analysis, edit the service Properties to limit the use of Linking Service to the most important functions. Only change these settings if the connection between your data and web solutions is poor.
1.
Under Incident Reports, mark Show user names in incident reports to have user names to display in incident reports rather than IP addresses. This may make it easier to determine who is moving sensitive data.
2.
Mark Show URL categories in incident reports to display URL categories rather than URLs in reports. For example, instead of http://www.cnn.com, reports might display News and Media.
3.
Under Content Analysis, mark Resolve user names when analyzing content to have the system resolve IP addresses to user names when it is analyzing transactions.
Use this option if there are rules that include or exclude user names as a source. For example, block John Doe from posting the document MyDoc.doc to the Web.
If there is a match, the rule is triggered.
4.
Mark Map URL categories when analyzing content to have the system to map URLs to categories when it is analyzing transactions.
Use this option if there are rules that include or exclude URL categories as a destination. For example, block John Doe from posting the document MyDoc.doc to News and Media sites.
5.
Click OK to save your settings.
Importing URL categories from Forcepoint Web Security
To use this method, you need an XML file with a list of categories from the Forcepoint Web Security Cloud Portal. This option is only available with a subscription to Forcepoint Web Security Cloud. See the Subscription page (Settings > General > Subscription) to see your subscriptions.
1.
Click Choose File, and browse to the location of the XML file with the URL categories.
2.
Select the file, and then click OK.
The file is uploaded to the server.
3.
Repeat as many times as needed (multiple files can be uploaded, one by one).
 
* 
Important 
*
If you previously worked with Linking Service, and thus already have URL categories in your rules, and now want to import URL categories using an XML file, note that categories imported via XML from the Forcepoint Cloud Security Gateway will override the existing rules. This can cause missing categories or conflicts, and it is highly recommended that you review your rules after importing new URL categories and make sure they are using valid categories.
*
If any of the following properties are missing for a URL category in the XML file, the DLP manager ignores the category, and it is not added to the database nor is it listed in the Security Manager:
*
Name
*
Predefined/Custom
*
Parent (note that "root" is a valid value)
*
If a URL category is corrupted (for example, is missing an ID number), it is recommended that you remove it from the XML file before uploading.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
General System Settings > Services > Linking Service and mapping URL categories
Copyright 2021 Forcepoint. All rights reserved.