Storage of Detected Strings

When the DLP engine matches strings to a DLP Data Type, Email Security stores these strings and displays them for administrators with sufficient permissions when they investigate the security events.

Since these strings are considered sensitive and private end-user data, you can select how they are stored and presented in the system called Detected Text Storage Mode.

To update Detected Text Storage Mode:

  1. Click Security Settings > Security Engines.
  2. Click Configure for DLP.
  3. Scroll down to Detected Text Storage Mode and select one of these options.
    1. Store detected text strings (default): This is the default option, and the detected data is saved and displayed on the security events for the forensic process.
    2. Obfuscate detected text prior to storage: Detected data is saved and displayed on the security events obfuscated. The original data is discarded and cannot be accessed.
    3. Do not store detected text: No detected data is stored or displayed on the security events.
  4. Click Save.

The selected Detected Text Storage Mode is applied, and the DLP engine stores and displays detected text according to your selection.