Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Set InterScan Messaging Security Virtual Appliance (IMSVA) 9.0 to display the detailed reason of Data Loss Prevention (DLP) compliance template

    • Updated:
    • 26 Nov 2015
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 9.0
    • Platform:
    • CentOS 6 64-bit
Summary

When a mail is detected by the compliance template (DLP), the detailed log does not show the detailed reason, such as the string which triggered the compliance template.

”log”

Details
Public

You may configure IMSVA to display the detailed reason by setting the hidden key in the tb_global_setting table:

"EnableComplianceDetailMatchResult = yes"

The default value is "no" if it is not defined.

The following SQL statement can set this parameter (if it does not exist):

insert into tb_global_setting values ('general', 'EnableComplianceDetailMatchResult', 'yes', 'imss.ini', '');

After inserting this parameter, the command "S99IMSS restart" should be executed.
The logs would then show the following:

”log”

Sensitive information which trigger the compliance template would be marked in asterisks:

”details”

If the administrator wants to unmark the sensitive information, he can set another hidden key:

"EnableSensitiveInfoMaskInComplianceMatchedContent = no"

The default value is "yes" if not defined.

The following SQL statement can set this parameter (if it does not exist):

insert into tb_global_setting values ('general', 'EnableSensitiveInfoMaskInComplianceMatchedContent', 'no', 'imss.ini', '');

After inserting this parameter, the command "S99IMSS restart" should be executed.
The logs would then show the following:

”details”

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy; Update; Migrate
Solution Id:
1113057
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.