Selecting web DLP policy destinations

Administrator Help | Forcepoint DLP | Version 8.4.x

Related topics:

Configuring the Web DLP Policy

Selecting web DLP policy destinations

Defining web DLP policy owners

Use the Destinations tab of the Policy Management > Web DLP Policy page in the Data Security module of the Forcepoint Security Manager to select one or more websites to include in the policy. When the system detects that someone is posting sensitive data to those websites, it triggers the policy.

Selecting destination websites

Under Destination Sites:

Select Any website to prevent sensitive data from being posted or uploaded to any website, without exception.

Select Websites that belong to the selected categories to prevent sensitive data from being posted or uploaded to known or potentially hazardous websites, but not to all websites.

You must have Linking Service installed, running, and enabled to monitor selected categories, and the connection to the Linking Service machine must be working. (Enable Linking Service on the Settings > General > Services > Linking Service page.)

Expand a category to select or deselect specific site categories.

Mark Identified malware sites to prevent sensitive data from being posted to websites identified as containing malicious software, including Bot Networks, Keyloggers, Phishing and Other Frauds, Spyware, and more.

Mark Suspected malware sites to prevent sensitive data from being posted to websites that contain potentially malicious or undesired content, including Potentially Unwanted Software, Potentially Damaging Content, Suspicious Embedded Link, and more.

Mark Data misuse sites to prevent sensitive data from being posted to websites that are prone to misuse, intentional or not, by users, including Peer-to-Peer File Sharing, Message Boards and Forums, General Email, and more.

Defining trusted domains

To exclude specific domains from policy enforcement:

Mark the Enable trusted domains check box.

Click Edit to select the trusted domains.

Because Forcepoint DLP does not enforce policies for trusted domains, these domains can receive any type of sensitive information via HTTP, HTTPS, or other web channels.

Several SaaS domains are excluded from analysis by default.

Exclude more domains as needed, or remove existing domains from the exclusion list.

It is also possible to customize the list of resources that are excluded from web policies. For more information, see Business Units.