Optimizing directory search results for the hybrid service

Administrator Help | Forcepoint Web Security | v8.5.x

Optimizing search results further refines the data that is sent to the hybrid service by defining patterns, or search filters, used to remove duplicate or otherwise unwanted entries from the directory search results. It also provides a way to modify the mail attribute for directory entries collected by Directory Agent before they are sent to the hybrid service.

If, for example, the mail attribute in your directory service has a partial or internal email address reference, you could use a search filter to replace that partial or internal information with external information, usable by the hybrid service. This would be useful for those who configure the hybrid service to automatically create passwords for users so that they can connect to the hybrid service when they are off site (see Configuring the hybrid service for off-site users).

The search filters that you create are applied to the directory data collected by Directory Agent before that data is sent to the hybrid service.

Click Optimize Search Results to see the current search filters, or to create new search filters using wildcards or regular expressions. There are 2 types of search filters: one to filter user entries and one to filter group entries.

To create a new search filter, click Add under the appropriate table.

To edit an existing search filter, click the associated Find String.

A popup dialog box prompts you to edit or enter:

Find string: The text to search for in the original directory data collected by Directory Agent.

Replace string: The new text that you want to substitute for the original text in data sent to the hybrid service.

When you are finished, click OK to close the dialog box and update the Filter User Results or Filter Group Results table. You must also click OK on the Shared User Data page to cache the change.

At this time, Directory Agent applies the search filters that you create only to the mail attribute.