Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 428
 
13-23
AsyncOS 9.5.x for Cisco Content Security Management Appliances User Guide
 
Chapter 13      Distributing Administrative Tasks
  Controlling Access to Sensitive DLP Information in Message Tracking
Controlling Access to Sensitive DLP Information in Message 
Tracking 
Messages that violate Data Loss Prevention (DLP) policies typically include sensitive information, such 
as corporate confidential information or personal information including credit card numbers or health 
records. By default, this content appears in the DLP Matched Content tab on the Message Details page 
for messages listed in Message Tracking results. 
You can choose to hide this tab and its content from Security Management appliance users based on their 
assigned predefined or custom role: 
Procedure 
Step 1
Go to the Management Appliance > System Administration > Users page.
Step 2
In the DLP Tracking Privileges section, click Edit Settings.
Step 3
Select the roles for which you want to grant access to DLP data in Message Tracking. 
Only custom roles with access to Message Tracking are listed. 
Step 4
Submit and commit your changes.
The Centralized Email Message Tracking feature must be enabled under Management Appliance > 
Centralized Services for this setting to take effect. 
Displaying a Message for Administrative Users
You can display a message that administrative users will see when they sign in to the appliance. 
To set or clear a message: 
Step 1
If you will import a text file, put it into the
 /data/pub/configuration
 directory on the appliance.
Step 2
Access the command-line interface (CLI). 
Step 3
Use the 
adminaccessconfig
 > 
BANNER
 command and subcommand. 
Step 4
Commit the change. 
Viewing Administrative User Activity