I need a solution
Hi! I installed a new DLP, but after setting no new incidents. There Incident Queue, but not new. For the test created two new Response Rules: One blocks and creates incident: "Endpoint Prevent: Block" and "All: Set Status: New", just creating another incident. Blocking works, but there is no incident. Tell me what's the problem?
It looks like this:
| Messages (Last 10 sec) | Messages (Today) | Incidents (Today) | Incident Queue | Message Wait Time | |||||
|---|---|---|---|---|---|---|---|---|---|
| Running | Enforce Server | 11.6.0.19032 | N/A | N/A | N/A | N/A | 0 | N/A | |
| Running | test_monitor | 11.6.0.19032 | Network Monitor, Network Prevent for E-mail, Network & Mobile Prevent for Web, Endpoint, Network Discover | 8 | 38 536 | 0 | 925 | 0:00:00 |