Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Click the name of a DLP policy to view detailed information on the DLP incidents detected by the policy. 
You can use this method to get a list of users who sent mail that contained sensitive data detected by the 
policy.

The DLP Incident Details table is an interactive table that shows the total number of DLP incidents per 
policy, with a breakdown by severity level, and whether any of the messages were delivered in the clear, 
delivered encrypted, or dropped. Click the column headings to sort the data. 

To find out more information about any of the DLP Policies listed in this table, click the name of the 
DLP Policy and the DLP Policy Page appears.For more information, see 

If your access privileges allow you to view Message Tracking data: To view Message Tracking details 
for the messages that populate this report, click a blue number link in the table. 

If you click on a name of a DLP policy in the DLP Incident Details table, the resulting DLP Policy Detail 
page displays the DLP incidents data for the policy. The page displays graphs on the DLP Incidents 
based by Severity. 

The page also includes an Incidents by Sender table at the bottom of the page that lists each internal user 
who has sent a message that violated the DLP policy. The table also shows the total number of DLP 
incidents for this policy per user, with a breakdown by severity level, and whether any of the messages 
were delivered in the clear, delivered encrypted, or dropped. You can use the Incidents by Sender table 
to find out which users may be sending your organization’s sensitive data to people outside your 
network.

Clicking the sender name on the incident detail page opens up the Internal Users page. See the 

 for more information. 

The Email > Reporting > Content Filters page shows information about the top incoming and outgoing 
content filter matches (which content filter had the most matching messages). The page displays the data 
as both bar charts and listings. Using the Content Filters page, you can review your corporate policies 
on a per-content-filter or per-user basis and answer the following types of questions:

Which content filter is triggered the most by incoming or outgoing mail?

The top DLP Policies that have been matched.

The DLP Incident Details table shows the total number of 
DLP incidents per policy, with a breakdown by severity level, 
and whether any of the messages were delivered in the clear, 
delivered encrypted, or dropped. 

For more information on the DLP Incidents Details table, see 
the