KB Article | Forcepoint Support

Problem Description

Several types of messages are displayed on the Forcepoint DLP Endpoint machine. Examples include:
  • Status details
  • Alert messages
  • Block messages
  • Confirmation messages
  • Bypass code requests

User-added image

These messages are configured in XML templates stored on the Management Server and deployed in Endpoint profiles. By editing the templates, you can customize the messages and languages that end users see in their Forcepoint DLP Endpoint Client software.

Resolution

To customize an Endpoint message, create a custom message file and then configure each endpoint profile to use the custom message file:
  1. Go to %dss_home%\custom\endpoint\msgFiles folder.
  2. Make a copy of the preferred language XML file, such as English.xml, and save it using a custom filename. Make sure the file is writable.
    NOTE: If you already have a custom XML file, copy it into %dss_home%\custom\endpoint\msgFiles folder. 
  3. Edit the new XML file. For instructions about editing and configuring specific messages, see the following sections in this article: NOTES:
    • Messages are stored in the form:
      <Message ID="nnnnnnnn">
         <Content>Message Content</Content>
         <Description>Message Description</Description>
      </Message>
    • Every type of message has a different ID.
    • Only change the text within the <Content></Content> tags. Do not change, add, or delete any existing XML format, including the Message ID.
    • Do not edit the text within the <Content></Content> tags if it is enclosed within square brackets. For example, [DLPUNDEFINED].
    • Message content should be limited to 511 characters or the system will use the default message.
    • The text should be UTF-8 encoded.
    IMPORTANT: If the edited file has incorrect syntax (e.g., a tag is not closed correctly), Forcepoint One Endpoint rejects the XML file when it is deployed to the endpoint machine. If the new file is rejected, Forcepoint One Endpoint will continue to use the old XML file.
  4. Save the file.

Configure the endpoint bypass message

  1. Find message 10010100.
  2. Modify the message content between the <Content></Content> tags as desired.
  3. Save the file.

Configure the confirmation dialog messages

New confirmation dialog messages were added in Forcepoint One Endpoint/Forcepoint DLP Endpoint v19.06. If you are installing or upgrading to Forcepoint One Endpoint v19.06 or higher and enabling the new confirmation dialog window, you must deploy the new message files through the Forcepoint DLP Manager. If you do not install the new messages, the confirmation dialog does not display correctly.

These message files are also compatible with lower versions of Forcepoint One Endpoint (v19.04 or lower) and the conventional Forcepoint DLP Endpoint (v8.5 or lower). Customers with custom message files must include the new confirmation dialog messages in their custom files.

User-added image

NOTE: To see the Policy violations information in the confirmation dialog box, select the Show incident details in the confirm dialog and the Log Viewer option on the Endpoint Profile's Properties tab on the Forcepoint Security Manager. See the Install the new XML file section below for more information about enabling this setting, then deploying the change.

Add the confirmation dialog messages to a custom file

  1. Open the default XML file in your preferred language.
  2. Copy your custom messages into the default file. By copying your custom messages into the default file, you ensure that the new confirmation dialog messages are included.
    For reference, the new confirmation dialog messages are:
    • 20190001
    • 20190002
    • 20190003
    • 20190004
    • 20190005
    • 20190006
    • 20190007
    • 20190008
    • 20190009
    • 20190010
    • 20190011
  3. Save the file

Customize the confirmation dialog radio button options

The five messages that an end user can select on the confirmation dialog window can be customized to match your organization's requirements.
NOTES: There is a maximum of 5 messages. You cannot add an extra message to the file. Each selectable message is limited to 70 characters. If you go over 70 characters, the message will be truncated with ellipses (...).
  • To customize the selectable messages shown to end users, update the text within the <Content></Content> tags in the following messages: 20190004, 20190005, 20190006, 20190007, and 20190008. For example, if you want to edit message 20190004, you would edit the bold text in the following message, then save the file:
    <Message ID="20190004">
       <Content>Acceptable operation (false positive)</Content>
       <Description>ILP controls\UI\Confirmation Dialog\Reason Radio button 1</Description>
    </Message>
  • To hide a message (for example, if you want to only display 4 messages), change the text within the <Content></Content> tags to [DLPUNDEFINED],then save the file. For example, if you want to hide/disable the last message and its radio button, edit the last message (20190008) to the following:
    <Message ID="20190008">
       <Content>[DLPUNDEFINED]</Content>
       <Description>ILP controls\UI\Confirmation Dialog\Reason Radio button 5</Description>
    </Message>
    [DLPUNDEFINED] should always be in English even if the message file is for a different language.

Show the link to your organization's policy in the confirmation dialog window

  • To hide/disable the corporate policy hyperlink (located at the bottom of the confirmation dialog window), change the text within the <Content></Content> tags to [DLPUNDEFINED] in message 20190011, then save the file:
    <Message ID="20190011">
       <Content>[DLPUNDEFINED]</Content>
       <Description>ILP controls\UI\Confirmation Dialog\Company policy URL\[DLPUNDEFINED] to disable this feature</Description>
    </Message>
    [DLPUNDEFINED] should always be in English even if the message file is for a different language.
  • To show/enable the corporate policy hyperlink, change the text within the <Content></Content> tags to a valid URL (in XML format) in message 20190011, then save the file:
    <Message ID="20190011">
       <Content>https://www.forcepoint.com</Content>
       <Description>ILP controls\UI\Confirmation Dialog\Company policy URL\[DLPUNDEFINED] to disable this feature</Description>
    </Message>

Change the organization's name on the confirmation dialog title bar

Change the text within the <Content></Content> tags in message 10010120:
<Message ID="10010120">
   <Content>Forcepoint One Endpoint</Content>
   <Description>ILP controls\UI\Confirmation Dialog\Caption</Description>
</Message>

Install the new XML file

  1. Log on to the Forcepoint Security Manager and go to Data > Settings > Deployment > Endpoint Profiles.
  2. Click the Properties tab.
  3. Under Endpoint Message Template, enable the Set message template to option, then select one of the new templates from the drop-down menu.
    User-added image
  4. (optional) To see the Policy violations information in the confirmation dialog box, select the Show incident details in the confirm dialog and the Log Viewer option under the Interactive Mode Options section.
    User-added image
  5. Click Save & Close.
  6. Deploy the changes.
  7. On the endpoint machine, click Update. Alternatively you can let the update run automatically based on a configured interval.

Keywords: Forcepoint DLP; Endpoint client messages; Customizing Client Messages; endpoint bypass message; dialog messages; New XML File;  Change Organization on Confirmation Title bar; Endpoint Custom Template Message; URL; Message File; msgFiles;

Article Feedback



Thank you for the feedback and comments.