Previous Topic: User Attribute Lookup

Next Topic: User Attribute Lookup Syntax

Configure Policy Settings for User Attribute Lookup

Before you can use User Attribute lookup commands, you must configure settings in the user policy and machine policy.

Configure Email Address Mapping

Important! You must set up email address mapping before you can use User Attribute lookup commands.

In the machine policy, settings in the E-mail User Identification folder enable email triggers to map the recipients of an outgoing email (or the sender of an incoming email) onto CA DLP users. Triggers can then evaluate the lookup command, comparing the attributes of the recipients (or the sender of an incoming email) against the test criteria.

There are two alternative mapping methods. First, conversion expressions parse and extract the key address components to derive a CA DLP user name. Second, the database lookup method checks a customized user attribute to compare captured email addresses against known CA DLP user accounts. You set up your preferred mapping method in the machine policy. For details about email address mapping, see the Deployment Guide for details; search the index for 'email address mapping'.

Configure Lookup Timeouts

You can also specify timeouts for lookup commands in the user policy. These prevent emails being delayed unnecessarily if it is taking too long to retrieve the attribute details from the parent server. These timeouts are defined in the System Settings policy folder.