Endpoint profile: Properties tab

Administrator Help | Forcepoint DLP | Version 8.4.x

Use the Properties tab to enable user notifications, define message templates, and configure policy override settings.

To allow end users to disable the Forcepoint DLP Endpoint software on their machines, under Interactive Mode Options, select Remote bypass.

This action requires a bypass code from the administrator. (See Bypassing endpoint clients for additional information.)

To alert endpoint users when content scanning is in progress, select Content scan alerts. When this option is enabled, a popup caption appears on the bottom of users' screens.

Content scan alerts are not displayed when data is copied to removable media using a non-desktop environment, such as an ssh terminal connection.

To notify endpoint users when file operations are performed, select File operation notifications. Depending on the application, file operations can include cut/copy, paste, file access, printing, LAN, encryption, and copying to removable media.

To change the default endpoint message template, under Endpoint Message Template, mark Set message template to, then select the template to use from the drop-down list.

Message templates are used for messages sent to the endpoint client, such as status details and alerts. The templates are XML files, and are available in the endpoint profile in multiple languages.

Templates are stored in the \custom\endpoint\msgFiles subdirectory of the Forcepoint DLP installation directory. Modify them as required. Each message can include up to 256 characters. Any additional characters are truncated.

Template files can be cloned, renamed, and modified. When a new file is added to the \msgFiles folder, it appears as a template option in the Security Manager. See Customizing Forcepoint DLP Endpoint client messages.

Under Data Loss Prevention (DLP) Policy Settings, mark Disable blocking and encryption capabilities when policy violations are detected to disable blocking and encryption of endpoint traffic. Even if a policy is specifically set up to block or encrypt content, the endpoint client overrides this setting and allows traffic.

Use this option, for example, if a policy is preventing a user from doing his job; the block can be overridden for a specific endpoint client.

Continue with Endpoint profile: Encryption tab.