IronPort - daily management guide - AsyncOS 7.6.1

Working with User Accounts
Controllingling Access to Sensitive Information in Message Tracking
8-18
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Chapter 8 Common Administrative Tasks
Messages that violate Data Loss Prevention (DLP) policies typically include sensitive information, such
as corporate confidential information or personal information including credit card numbers and health
records. By default, this content appears in the DLP Matched Content tab on the Message Details page
for messages listed in Message Tracking results.
You can choose to hide this tab and its content from users who have access to Message Tracking based
on their assigned predefined or custom role. Administrator users can always see this content.
To specify which user groups can see this content:
Step 1 Go to the System Administration > Users page.
Step 2 Under DLP Tracking Privileges, click Edit Settings.
The DLP Tracking Privileges page appears.
Figure 8-13 DLP Tracking Privileges
Step 3 Select the roles for which you want to grant access to DLP data in Message Tracking.
Custom roles without access to Message Tracking can never view this information and thus are not listed.
Step 4 Submit and commit your changes.
Changing Your Password
The following features must be enabled in Security Services for this setting to take effect:
Message Tracking
RSA Email DLP
RSA Email DLP > Matched Content Logging
For more information on DLP policies, see the “Data Loss Prevention” chapter in the Cisco IronPort
AsyncOS for Email Configuration Guide.
For more information on searching for DLP violations in Message Tracking, see Running a Search
Query, page 3-5.
Users can change their own passwords via the Options > Change Password link at the top of the GUI.
Enter the old password then enter the new password and retype it for confirmation. Click Submit. You
are logged out and taken to the log in screen.
In the CLI, use the password or passwd command to change your password. If you forget the password
for the admin user account, contact your customer support provider to reset the password.
OL-25138-01