User Guide

17-42
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 17 Data Loss Prevention
Troubleshooting Data Loss Prevention
Related Topics
• Showing or Hiding Sensitive DLP Data in Message Tracking, page 17-38
• Controlling Access to Sensitive Information in Message Tracking, page 32-5
Troubleshooting Data Loss Prevention
• Enterprise Manager Disconnects the Email Security Appliance, page 17-42
• RSA Email DLP Fails to Detect Violations in Email Attachments, page 17-43
Enterprise Manager Disconnects the Email Security Appliance
Problem , Enterprise Manager disconnects the Email Security appliance.
Solution The correct certificates have not been properly installed on the Email Security appliance. See
(Recommended) Obtaining and Uploading Certificates for SSL Connections between Email Security
Appliances and Enterprise Manager, page 17-26.
If you have a cluster or group deployment, check the Network > Certificates page on each appliance to
verify that the certificate is the same on all.
Related Topics
• Lost Connectivity Between the Email Security Appliance and Enterprise Manager, page 17-33
To Do This
Search for messages containing DLP violations
using criteria such as DLP policy name, violation
severity, and action taken, and view details of
messages found
See Chapter 29, “Tracking Messages.”
For Enterprise Manager deployments, you can
also view messages in Enterprise Manager. See the
Enterprise Manager documentation.
View or manage messages that have been
quarantined as suspected DLP violations
See Working with Messages in Policy, Virus, or
Outbreak Quarantines, page 30-10.
For Enterprise Manager deployments: You can
view quarantined messages in Enterprise Manager
or the Email Security appliance, but you must use
Enterprise Manager to release or delete
quarantined messages.
View a summary of DLP incidents See information about DLP Incident Summary
reports in Chapter 28, “Using Email Security
Monitor.”
View information about DLP violations
discovered in outgoing mail
See information about DLP Incident reports in
Chapter 28, “Using Email Security Monitor.”
For Enterprise Manager deployments, see the
Enterprise Manager documentation.
Use Enterprise Manager to view DLP incident
data and messages containing suspected violations
See the documentation for Enterprise Manager.