Configuring the policy engine

This section outlines the steps to configure policy engine instances within your system module.

The policy engine is responsible for parsing data and using analytics to compare it to the rules in Forcepoint DLP policies. There can be multiple policy engines in a deployment to manage high transaction volumes.

Tip: To balance the load between policy engines, click Load Balancing in the System Modules toolbar. Refer to Balancing the load for more information.

Policy engines reside on the:

Management server
Supplemental Forcepoint DLP servers
Protectors
Content Gateway machines
Forcepoint Email Security machines

To configure the policy engine instances, select it on Deployment > System Modules, and then update the following fields in the Policy Engine Details page:

Steps

Select or clear Enabled to enable or disable the module in your deployment.
Enter a Description of the module (up to 4000 characters).

The page also displays the module type, name, and FQDN, which cannot be changed.
For enabling the Optical Character Recognition (OCR) settings you can choose one of the following options:
- Option one: Defining global OCR configuration for all policy engines
  1. Go to General > Policy Engine, and then select Enable OCR.
  2. In the Supported Languages for OCR section, you can select the desired languages from the Available Languages list.
- Option two: Updating the following fields for the selected module in the Policy Engine Details page.
  1. Choose one of the following:
    1. Inherit the policy engine global settings - Select the existing global configuration.
    2. Configure standalone settings for this policy engine - Select the settings to enable OCR and choose the desired languages.
    Note: To configure OCR over cloud channels, you must go to General > Services > Data Protection Service.
  2. Click OK to save your changes and return to the System Modules page.
Note: The maximum file size that can be scanned by OCR is 25MB, and the minimum is 5KB.