When a client system enters bypass mode it will generate an event that is sent to the EPO server. These are referred to as 'Operational events' and can be viewed by going to menu > DLP Operations. In your DLP rules you can configure it to generate incidents when the rule is triggered (i.e. if you have it configured to trigger on a device plug event) and these would be viewed in the DLP incidents (menu > DLP Incidents). If you are looking to have an email notification when a rule is triggered it will require some additional configuration with setting up an 'incident task' and varies a bit depending on which version you are running.
I would of thought, when the end user hits the Request bypass button that will initiate an automatic response from EPO, by sending a email to someone.
Do you have the options of how to configure such ?
It's a rather lengthy explanation if you are new to the product. I'd recommend starting by looking over the portion of the product guide that covers this first:
Incident tasks and configuration are covered on page 188 of the guide. This makes the assumption that you have already configured an email server for EPO to use in order to send the email though. If you haven't it's done via menu > server settings > email server.
hhoang I am also currently on DLP 9.3.600 ePO 5.3 and soon moving to DLP 10.
I have gone through the release document and cannot find anything specific to creating email notification immediately a rule violation is triggered.
Only information about setting up automatic mail notifications from there scheduling it.
Is this possible on DLP 10 or on DLP 9.3.600 for that matter.
We do have reports that pull events however we sometimes pick up serious violations once the perpetrators have left the company.