Web DLP logs

The Web DLP logs contain data related to policies configured to block uploads based on data patterns under the Web Proxy Policy options. Forcepoint ONE Mobile and Cloud SWG support the ability to block possible data leakage attempts on uploads to any site.

To access the page, navigate to Analyze > Logs > Web DLP.

Note: If your mobile network assigns the device an IPv6 address, the address displayed on the logs will be a default dummy address.

Admins can identify a mobile device from the Web DLP logs by searching the device's Registration ID. Clicking on a specific event log line opens the Web DLP Transaction Details page, which provides detailed information about the event. The Device GUID field will display the Registration ID.

Example: If the Device GUID is DE241C44-283B-18EE-AB6C-EFE6F802C92F and the Registration ID is 77502, navigate to the Web DLP Transaction Details page and search for Device GUID = 77502, not DE241C44-283B-18EE-AB6C-EFE6F802C92F.

To learn more about web DLP logs, see the Reviewing DLP logs page from Forcepoint ONE SSE Deployment Guide.