Previous Topic: Intervention Option: WarnNext Topic: Detecting Key Text


Intervention Option: Warn (Personal)

Available for: Emails detected by endpoint agents; Web pages.

Not available for: Application Monitor, Data At Rest, Data In Motion. Also, this warning option is not available for emails detected by an Exchange or Domino server agent, or for SMTP emails and webmails detected by the NBA.

Choose 'Warn, user may designate as personal' to display a modified Warning dialog whenever CA DLP detects an unauthorized Web or email event. Like the standard Warning dialog, the modified dialog lets the user choose whether to continue or not. Most importantly, the user can flag the event as 'Personal'. There are three dialog buttons:

Personal

Users can click this button to indicate that they are opening or sending a personal email or that they are browsing the Web page for personal reasons. This overrides the warning, and allows the user to continue. It also generates a 'disregarded warning' event, although the event itself is identified as a personal email or Web event in the Console.

Important! If the user clicks Personal, the Web page or email content is not recorded, even if the control action setting Capture Disregarded Warnings? is set to True.

Cancel

If the user clicks Cancel, this generates a heeded warning. In effect, the user accepts the warning and quits what they were doing. For example, they quit trying to send the email or browse a prohibited Web page.

Continue

If the user clicks Continue, this generates a disregarded warning. The user is allowed to coninue (for example, they can send the email anyway), but CA DLP records the fact that the user continued despite being explicitly warned against doing so.

Note: A disregarded warning does not necessarily imply any misconduct by the user. For example, a user may want to send a non-encrypted email, in breach of corporate guidelines, because it concerns a trivial matter.

In all cases, you can capture the associated event. You can also forward emails to another address, send automatic replies to incoming emails, and redirect Web users to alternate URLs.

More information:

Intervention Setting