The desired DLP template to be used should be ready before creating a Data Discovery policy. Follow the steps provided in the Online Help Guide.

To create a Data Discovery Policy:

1. Log in to the Apex Central or Apex One as a Service console.
2. Go to Policies > Policy Management.
3. Change the product to Apex One Data Loss Prevention.

   

4. Enter a policy name and select the machines where the policy will be deployed to.
5. Select Apex One Data Discovery.

   

6. Click Add.
7. Enter a Rule name and tick "Enable this rule".

   

8. Specify the path and specific file extensions to be scanned.
   • The file location is optional. Leaving it blank will scan the entire machine.
   • Wild cards are accepted under File Type Exceptions.
9. Click the (2) Template tab and select the associated template to be scanned, and then click add and ensure that this is listed under Selected Templates.

   

10. Click the (3) Actions tab and configure Encryption (Trend Micro Endpoint Encryption required) if necessary.
11. Click the (4) Schedule tab and set the desired schedule for the Data Discovery Scan to be performed.

    

12. Click Save.
13. Back in the Policy Management page, tick "Enable Data Discovery" and ensure that the rule is enabled.

    

14. Click Deploy.
15. Wait for the policy to be deployed and observe any entries after the specified schedule in step 11.

To review files detected by Data Discovery:

1. Go to Logs > Log Query.
2. Change Virus/Malware to "Data Discovery" and click OK.

   

3. Select the range of logs to be reviewed.
4. Click Search.

Alternatively, reporting via the dashboard can be seen via the Apex Central widget tab by adding respective entries for Data Discovery.

For further concerns, contact Trend Micro Technical Support.