KB Article | Forcepoint Support

Problem Description

When DLP policies are set to consider Custom Computers within the rule Source inclusions or exclusions corresponding to Endpoint Client machines on the environment, detection is not occurring. Why is this the case?

In this circumstance, the Custom Computers are set up with IP or Hostname only.

Resolution

In regards to Endpoint detection, the Fully Qualified Domain Name (FQDN) is a required entry for each Custom Computer in order for the rule to trigger as desired, particularly when it concerns excluding specific Endpoint entries from rules.

Include this information and confirm if the rule is now working as intended.



Keywords: DLP Data Security Manager; Rule Issue; False Positive; DLP Policy Setup; Source Inclusion Exclusion, DLP Endpoint; Forcepoint One Endpoint; Custom Computers; FQDN IP;

Article Feedback



Thank you for the feedback and comments.