Execute Smart Response Rules

Use this feature to execute Smart Response Rules for the Symantec DLP incidents.

Avant de commencer

You need to configure the Smart Response Rules by following procedure explained here in this section, Configure Smart Response Rules.

Role required: sn_dlir.admin

Remarque :

The response options on the workspace will be available for the end user or analyst or manager based on the configuration mentioned in the section Configure response option for your DLP incidents.

Procédure

1. Navigate to All > DLP > DLP User Workspace.
2. Open any Symantec DLP incident.
3. Click Respond.
4. Select the response option from the Response drop down list.
   The response options will be visible based on the configuration of the Incident Response Option Rule and Response Option Mappings.
5. Click Submit.
   Remarque :

   You can also configure the approval rule(s) for the Response Options by following the procedure explained in the Create Approval Rules section. When an approval rule is configured for the Smart Response Rule, the approval flow will be triggered first and after receiving all the approvals, the Smart Response Option flow will be triggered. The state of the DLP Incident will be updated as per the target state of the Response Option mapping after successful run of response option.