View DLP incident reports

Viewing and managing reports for the web traffic is the same as for the on-premises DLP. The main change involves what is displayed for a DLP incident:

  • Source: User email or login name
  • Destination: Host name and URL categories
    Note: URL Categories imported from Forcepoint Web Security Cloud are marked with an asterisk (*), while URL Categories mapped using Linking service are not.
  • Channel: HTTP or HTTPS