cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Linuxxo
Level 9
Report Inappropriate Content
Message 1 of 13

Missing user information on Incidents

Hello,

Not sure if this may belong to the ePO or DLP sections, but I am missing several user information when a new Incident is raised by the DLP. For example, I would like to use the "Company" attribute, but when I add the "Destination User Company" then the field displays no content (apart from the word None). I believe that the attribute may have to be imported through an LDAP sync, but I have searched for both the ePO (5.9.1) and DLP, but I cannot find anything that can help. Any suggestions?

Many thanks in advance.

 

 

12 Replies
McAfee Employee DLP_RS
McAfee Employee
Report Inappropriate Content
Message 2 of 13

Re: Missing user information on Incidents

Please confirm the DLP Extension installed on ePO server. This looks like to be a DLP related issue.

 

Linuxxo
Level 9
Report Inappropriate Content
Message 3 of 13

Re: Missing user information on Incidents

Sure, the Extension version is 1.1.0.163.

McAfee Employee DLP_RS
McAfee Employee
Report Inappropriate Content
Message 4 of 13

Re: Missing user information on Incidents

AFAIK, There is a manual way to achieve it. It can be achieved by Export/import information using a CSV file as user information.

I would recommend to a log a service request with McAfee technical support for an automated solution. The solution may require review of the data accessible using your LDAP.

 

 

 

 

Fademidun
Level 11
Report Inappropriate Content
Message 5 of 13

Re: Missing user information on Incidents

Have you checked the User/groups settings?

Check the Users and Groups settings, make sure the LDAP server name is checked.

Linuxxo
Level 9
Report Inappropriate Content
Message 6 of 13

Re: Missing user information on Incidents

Thanks for your reply, unfortunately I am not sure where those settings would be located. Are those located under the Configuration section?

Fademidun
Level 11
Report Inappropriate Content
Message 7 of 13

Re: Missing user information on Incidents

DLP Policy Manager/DLP Appliance Management/User and Groups

Linuxxo
Level 9
Report Inappropriate Content
Message 8 of 13

Re: Missing user information on Incidents

Thanks, I have found it now and I will give it a try.

Linuxxo
Level 9
Report Inappropriate Content
Message 9 of 13

Re: Missing user information on Incidents

Unfortunately that did not help, the User Primary Email address is missing for most to users. I guess that I may have to find an alternative solution until the issue is fixed.

Re: Missing user information on Incidents

Can you please send a screenshot of what you're trying to achieve

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community