Registering the DLP Module

Administrator Help | Forcepoint Email Security | Version 8.4.x

With the DLP module, you can have your email analyzed for regulatory compliance and acceptable use and protect sensitive data loss via email by enabling DLP policies in the Main > Policy Management > Policies page. Data loss prevention policies are enabled by default.

See Enabling data loss prevention policies for more information about activating DLP policies.

Email DLP policy options are configured in the Security Manager Data Security module (Main > Policy Management > DLP Policies > Manage Policies). A new policy wizard provides the steps for creating a new email DLP policy. See Forcepoint DLP Manager Help for details.

If you plan to use email encryption functions, you must configure an email DLP policy with an action plan that includes message encryption. See Forcepoint DLP Manager Help for details.

You can also create filter actions for use in a DLP policy action plan. See Creating and configuring a filter action for information.

You must register email appliances with the Forcepoint Email Security DLP Module in order to take advantage of its acceptable use, data loss prevention, and message encryption features. Registration is automatic when you enter a valid subscription key. Subsequent appliances are registered when you add them to the Security Manager from the Email Security module.

If the Status field in the Email Security module Settings > General > Data Loss Prevention page displays Unregistered, you must register with the Forcepoint Email Security DLP Module manually.

Use the following steps in the Email Security module Settings > General > Data Loss Prevention page to register a standalone appliance manually with the email DLP Module:

Enter a valid subscription key in the Settings > General > Subscription page.

Specify the IP address used for communication with the email protection system in the Communication IP address drop-down list.


	Note The appliance C interface IP address is selected by default. This setting is recommended for Forcepoint Email Security DLP Module registration.

Select the Manual registration method to enable the Properties entry fields.

Specify the following data management server properties:

IP address

User name

Password

Click Register.

You must deploy DLP policies in the Data Security module to complete the process. Click the Data Security module and then click Deploy.


	Important You should wait until DLP policies are completely deployed before you register another standalone appliance.

The following issues apply if you are deploying Forcepoint Email Security in an appliance cluster:

Register all the primary and secondary machines with the email DLP Module before you deploy any data loss prevention policies. If you deploy DLP policies on the primary appliance while you are registering a secondary machine, the registration process for the secondary machine may not complete.

Ensure that all machines in a cluster use the same physical appliance interface (the C, E1, or E2 IP address) to register with the email DLP Module.