Step9: View Forcepoint DLP incidents on the FSM

Viewing and managing reports for the web traffic is the same as for the on-premises DLP.

The main change involves what is displayed for a DLP incident:

  • Channel: HTTP or HTTPS
  • Analyzed by: Data Protection Service
  • Detected by: Forcepoint ONE Secure Web Gateway
  • Source: User email or login name
  • Destination: Host name and URL categories
    Note: URL Categories imported from Forcepoint ONE SSE are marked with an asterisk (*), while URL Categories mapped using Linking service are not.