Unable to see HTTPS event in the Data Loss Prevention

[Vishnu Achuthan]

Hello

Here is the connection SSL Box <- -> AMP(Advanced Malaware Protection) <-> Test Proxy -> DLP. For testing purpose, I tried  generating an  HTTPS event(Opened a HTTPS site for my test) to check if the same event is triggered as incidents in the DLP . I m able to see that HTTPS site in SSL Session Log as being Decrypted(Correlated Proxy Flow) -Success, unfortunately can't find the incidents for same in the DLP. 

Please help

 

[Syed Hussain1]

Hi,

You need to use Network Monitor in TAP mode wherein you send the traffic to Network Monitor.  You should also need to create a policy in DLP based on keyword so that I trigger an incident.

Thanks,

-Syed Hussain

[Vishnu Achuthan]

Thanks Syed. Will do