Registering the DLP Module

Administrator Help | Forcepoint Email Security | Version 8.5.x

With the DLP module, your email can be analyzed for regulatory compliance and acceptable use and protect sensitive data loss via email by enabling DLP policies on the page Main > Policy Management > Policies. Data loss prevention policies are enabled by default.

See Enabling data loss prevention policies for more information about activating DLP policies.

Email DLP policy options are configured in the Security Manager Data Security module (Main > Policy Management > DLP Policies > Manage Policies). A new policy wizard provides the steps for creating a new email DLP policy. See Forcepoint DLP Administrator Help.

If you plan to use email encryption functions, you must configure an email DLP policy with an action plan that includes message encryption. See Forcepoint DLP Administrator Help.

You can also create filter actions for use in a DLP policy action plan. See Creating and configuring a filter action for information.

You must register email appliances with the Forcepoint Email Security DLP Module in order to take advantage of its acceptable use, data loss prevention, and message encryption features. Registration is automatic when you enter a valid subscription key. Subsequent appliances are registered when you add them to the Security Manager from the Email Security module.

If the Status field in the Email Security module Settings > General > Data Loss Prevention page displays Unregistered, you must manually register with the Forcepoint Email Security DLP Module. The following steps detail how to manually register a standalone appliance manually with the email DLP Module:

Manually register the DLP module

Navigate to the page Settings > General > Subscription.

In the field Subscription key, enter a valid subscription key.

Click OK.

The subscription is updated.

Navigate to the page Settings > General > Data Loss Prevention.

From the pull-down menu Communication IP address, specify the IP address used for communication with the email protection system.


	Note The appliance C interface IP address is selected by default. This setting is recommended for Forcepoint Email Security DLP Module registration. If you are running Forcepoint Email Security in Azure, you must use the C interface IP address, as Forcepoint Email Security in Azure only supports a single interface.

Select the registration method Manual.

The Properties entry fields are enabled.

Specify the following data management server properties:

IP address

User name

Password

Click Register.

To complete the process, you must deploy DLP policies in the Data Security module; click the Data Security module and then click Deploy.


	Important Wait until DLP policies are completely deployed before you register another standalone appliance.

Consider the following when deploying Forcepoint Email Security in an appliance cluster:

Register all the primary and secondary machines with the email DLP Module before you deploy any data loss prevention policies. If you deploy DLP policies on the primary appliance while you are registering a secondary machine, the registration process for the secondary machine may not complete.

Ensure that all machines in a cluster use the same physical appliance interface (the C, E1, or E2 IP address) to register with the email DLP Module.