Meta tags:
description=Thoughts from a Conservative point of view in regards to technology;

Headings (most frequently used words):

dlp, the, in, to, it, symantec, configuring, overview, analytics, for, box, com, data, user, conservative, post, navigation, deviceid, policy, insight, response, rule, 14, this, discover, scan, create, do, process, problem, you, using, of, view, how, changes, made, techie, menu, tracking, use, scanning, tagging, what, looks, like, network, steps, need, different, license, invalid, username, and, password, when, trying, cubes, solution, my, if, are, should, be, can, install, on, red, hat, linux, system, with, pre, defined, name, cool, things, about, welcome, back, hex, risk, reporting, recent, posts, blogroll, pages, tweets, thoughts, from, point, regards, technology, leveraging, works, examples, provider, source, why, get, custom, attributes, import, reports,

Text of the page (most frequently used words):
the (264), and (92), dlp (62), data (55), for (49), this (44), com (37), box (37), symantec (36), you (34), will (31), that (31), can (28), user (25), #system (25), analytics (23), #insight (21), posted (21), your (21), are (19), have (18), with (17), select (17), discover (15), policy (15), new (15), within (15), was (15), scan (14), response (14), how (14), server (13), like (12), report (12), rule (12), then (12), create (12), there (12), need (12), management (12), not (12), configuring (11), risk (11), reports (11), information (11), console (11), cloud (11), post (10), comment (10), account (10), deviceid (10), source (10), attributes (10), file (10), jonathan (10), license (10), sql (10), process (9), cubes (9), directory (9), created (9), users (9), has (9), from (9), would (9), environment (9), what (9), storage (9), target (9), device (9), now (8), when (8), network (8), scanning (8), use (8), incidents (8), endpoint (8), using (8), add (8), screenshot (8), incident (8), shows (8), first (8), home (8), conservative (7), under (7), once (7), needs (7), either (7), one (7), leave (7), ability (7), who (7), install (7), wordpress (6), blog (6), list (6), password (6), but (6), name (6), found (6), custom (6), reporting (6), part (6), order (6), help (6), tagged (6), note (6), cover (6), get (5), view (5), techie (5), about (5), username (5), posts (5), these (5), based (5), next (5), import (5), after (5), provide (5), being (5), used (5), demo (5), navigate (5), into (5), specific (5), also (5), out (5), over (5), available (5), owner (5), needed (5), additional (5), changes (5), actions (5), without (5), service (5), allow (5), folder (5), portion (5), which (5), overview (5), 2015 (5), services (5), click (5), analysis (5), connect (5), configure (5), figure (5), inclusion (5), exclusion (5), comments (4), already (4), invalid (4), tagging (4), generated (4), down (4), summary (4), configured (4), leverage (4), type (4), setup (4), here (4), 2014 (4), had (4), back (4), just (4), provides (4), api (4), their (4), been (4), installed (4), separate (4), files (4), make (4), things (4), find (4), write (4), datalossprevention (4), time (4), database (4), should (4), itanalytics (4), correctly (4), looks (4), studio (4), see (4), step (4), guide (4), regards (4), authorize (4), our (4), manage (3), content (3), linux (3), altiris (3), may (3), august (3), check (3), run (3), sources (3), different (3), populated (3), defined (3), helps (3), loss (3), prevention (3), security (3), read (3), awesome (3), still (3), were (3), years (3), personal (3), way (3), enhanced (3), however (3), show (3), understand (3), any (3), some (3), portal (3), review (3), items (3), permissions (3), allows (3), able (3), pre (3), access (3), customer (3), following (3), protect (3), via (3), command (3), work (3), change (3), key (3), protection (3), installation (3), tools (3), both (3), demonstrate (3), above (3), login (3), changed (3), two (3), oracle (3), why (3), point (3), value (3), etc (3), various (3), against (3), version (3), settings (3), open (3), made (3), provider (3), all (3), sure (3), problem (3), error (3), connected (3), tag (3), enabled (3), tab (3), stored (3), exception (3), regex (3), devices (3), laptop (3), exe (3), started (2), site (2), must (2), logged (2), log (2), sign (2), subscribed (2), subscribe (2), tweets (2), amazon (2), wish (2), ubuntu (2), trying (2), tracking (2), older (2), navigation (2), selected (2), further (2), group (2), existing (2), connection (2), screenshots (2), attribute (2), example (2), active (2), default (2), outside (2), lead (2), steps (2), take (2), displayed (2), covers (2), email (2), organization (2), those (2), march (2), hexonyx (2), great (2), hex (2), someone (2), come (2), running (2), mud (2), ago (2), missed (2), query (2), dql (2), interface (2), populate (2), support (2), including (2), track (2), supported (2), platforms (2), windows (2), release (2), ownership (2), confirm (2), folders (2), violate (2), policies (2), having (2), accounts (2), enforce (2), smart (2), rules (2), remediate (2), remediation (2), owners (2), workflows (2), seen (2), customers (2), answer (2), installer (2), correct (2), creating (2), request (2), perform (2), recently (2), red (2), hat (2), adduser (2), option (2), msi (2), before (2), ita (2), performing (2), located (2), sep (2), bay (2), dynamics (2), finally (2), indicators (2), trend (2), product (2), action (2), auditing (2), auditors (2), stand (2), alone (2), covered (2), more (2), products (2), troubleshooting (2), configuration (2), restart (2), setting (2), where (2), right (2), properties (2), inprocess (2), providers (2), oraoledb (2), did (2), processing (2), everything (2), solution (2), same (2), tried (2), checked (2), set (2), showing (2), getting (2), est (2), processed (2), large (2), full (2), text (2), subscription (2), schedule (2), drop (2), loaded (2), entry (2), listed (2), applied (2), assigned (2), confidential (2), start (2), fill (2), desktop (2), attached (2), computer (2), usb (2), removable (2), thoughts (2), technology (2), design, loading, collapse, bar, subscriptions, reader, privacy, jjesse, pages, org, tygrrrr, express, tech, journal, strange, maps, svs, daves, vista, weblog, other, stuff, christian, chicagoan, hacking, ninja, absolute, moral, authority, blogroll, recent, 2026, present, detail, types, together, break, severity, complete, presented, seem, ready, selecting, presents, again, than, populating, separately, department, csv, item, keep, clear, lot, confusion, breaks, gives, behavior, individuals, associating, focus, efforts, posing, highest, story, landed, job, bad, news, player, bit, date, probably, don, weapon, piece, quest, gear, last, memory, riding, bike, quickly, zones, joining, friends, best, fire, zmud, whatever, client, many, join, facebook, missing, much, number, welcome, specification, language, extract, vian, integrate, 3rd, party, applications, computation, calculate, exclude, deleted, disabled, sid, calculating, actual, display, inferred, health, audit, runs, automatically, 5am, issues, charts, statistics, happening, unresolved, migrated, sids, improvements, addition, filers, supports, monitoring, netapp, cluster, mode, emc, isilon, 2012, table, notes, requires, higher, confirmation, infer, ownershiop, lets, actually, yours, triggering, encrypt, entitlement, suggest, self, easier, custodians, directly, potentially, depending, workflow, own, such, most, responsible, owns, struggle, ith, identifying, unstructured, questions, june, cool, tip, currently, enhancement, question, asked, during, creates, protect_update, fail, because, could, doing, member, ldap, automounted, didn, local, passing, line, location, opt, october, provided, free, charge, media, please, contact, manager, company, obtain, its, partners, performance, predefined, reducing, third, common, trends, area, second, requested, prove, changing, randomly, coming, statement, clean, whenever, people, ask, bother, bunch, ways, slice, dice, filtering, summarizations, adds, several, exposed, does, easily, trending, reduced, concerns, past, requirement, platform, smp, known, loner, case, developed, visit, http, baydymanics, critical, systems, csp, suite, cube, pivot, tables, peformance, kpis, january, window, closed, reopen, databases, expand, listing, something, shown, objects, linked, servers, documented, through, making, updated, fixed, wrong, manual, end, another, message, confused, roles, panic, today, strong, off, try, resolve, success, resolved, 26pm, 30pm, installing, kept, problems, jumped, them, july, yes, according, licensing, year, done, along, filter, scanned, filters, control, authorized, days, reauthorized, administrator, button, general, targets, scans, rest, locations, visual, snapshot, icon, automatic, enable, trigger, enterprise, result, completed, wait, normal, below, clicked, examples, authenticated, indexer, collecter, clicking, while, official, roadmap, assume, forthcoming, logging, left, side, works, around, previous, introduced, corporate, context, september, well, towards, bottom, class, save, edit, leveraging, form, goal, generic, possible, giant, ids, definition, agents, values, per, amount, output, directed, textfile, txt, want, put, dev, contains, string, execute, prompt, taken, admin, tool, agent, executable, gather, prevent, limit, copied, drives, document, 2016, skip, menu,

Text of the page (random words):
a tagging response rule for box com in dlp 14 this guide will cover configuring box com scanning and then also provide some screenshots around what it looks like how it works after logging into the data insight console we will need to access the settings tab of the management console to setup our cloud sources which can be found on the left side of the console in the above screenshot figure 1 it shows there is one cloud service enabled and we would like to add an additional source by clicking on add a new cloud service while i have not seen an official roadmap i would assume additional services are forthcoming in order to perform the scanning we will need to authorize the account against the box com api in order to process everything correctly make sure the owner account is used to connect and use the system the above screenshot figure 3 shows the demo system being authenticated to the system one the indexer and collecter are assigned we can then start the scanning of the box com account examples now that the cloud source is configured we can start the data insight scan or wait for the normal schedule in the below figure figure 4 we have clicked on the actions drop down and have selected scan now once the scan has been completed and the information has been processed box com information will be in the data insight system figure 5 shows the result of the scan against the demo system posted in dlp tagged datalossprevention dlp leave a comment configuring a tagging response rule for box com in dlp 14 posted on august 17 2015 by jonathan overview new in dlp 14 is the ability to scan box com for confidential data that may be stored in an enterprise s box com environment see this post for more information on how to configure this this post will cover how to configure the the response rule configuring the response rule the first step to configure the response rule is to enable the response rules for scanning within the discover target if the check box is not enabled the response rule will not trigger the response rule needs to be created and then assigned to the policy in order for it to work within the system add a new response rule and select the type automatic what this looks like the incident report will show a new icon the tag next to the box com incident the incident snapshot shows further information in regards to the tagging response rule showing up finally we can see the visual tag applied within the box com interface posted in personal 1 comment configuring a box com network discover scan in dlp 14 posted on august 13 2015 by jonathan overview new to symantec dlp 14 we have the ability to do network discover scans data at rest of content that is stored in cloud storage locations the first service this is available for is box com this post will cover how to configure a network discover scan for cloud storage once you have applied the cloud storage license steps to create a box com discover scan once the license for cloud storage dlp is loaded into the system a new entry to create a box com discover target will be listed once the license for cloud storage dlp is loaded in the system a new entry to create a box com discover target will be listed navigate to manage discover scanning discover targets under the drop down for new target select box just like any discover target configure the target with name scan type and schedule under the general settings we need to authorize the box com scanning account which is new click on the authorize button provide the username and password for the administrator of your box com environment and click authorize the dlp system will be authorized for 60 days and after that time the system can be reauthorized within the box com scan we can filter out which files within the box environment can be scanned within the box com environment and the filters tab allows us to control this along with being able to scan a folder on box com we have the ability to tag a file with a response rule and this needs to be enabled in the protect tab of things a separate blog post will cover this once this is all done a cloud storage target for box com will be configured and setup this target can then be run just like any network discover target do i need a different license for this yes a license for cloud storage dlp according to the dlp licensing guide this is a subscription based license available in a 1 year subscription posted in dlp symantec tagged box com datalossprevention dlp 14 2 comments invalid username and password when trying to process the dlp it analytics cubes posted on july 14 2015 by jonathan the problem recently i was installing the stand alone version of it analytics and the dlp cubes and kept running into problems processing the cubes in regards to invalid username and password when the cubes were processed within it analytics a large error was created but the full text was not generated so i jumped in sql management studio connected to the analysis services found my dlp cubes and tried to process them it was within sql management studio and found i was getting an error with invalid username and password this error message confused me as i was using the same account that i installed sql with and installed it analytics with so i tried some troubleshooting and checked various roles within sql and checked what permissions were set on the database analysis services etc and it was time to panic i had a demo today at a new to me customer and needed to have strong showing so it was off to symantec support to try and resolve the problem i had great success getting my incident resolved at 3 26pm est when my demo started at 3 30pm est so here s the solution the solution to my problem the first part that was wrong with my installation and configuration was i did not read the installation manual all the way to the end and missed a step also there was another step that needed to be changed note after making these changes you will need to restart your sql server services to make sure everything is updated and fixed correctly changes made to the provider this first step is documented in the install guide and i just did not read all the way through it the oraoledb oracle provider needs to have a setting changed in order for the processing to work we need to select allow inprocess in order for the cubes to process correctly in sql management studio connect to the database portion of your server and then we need to find the list of providers this is found under server objects linked servers providers and then right click on the oraoledb oracle provider and select properties as shown in the screenshot we need to select allow inprocess check this box and select ok changes made to the data source the next change that needs to be made to the itanalytics data source this setting is found under the analysis server portion of your sql server if you already closed management studio you will need to reopen it up and connect to the analysis server if it is still open connect to the analysis server under databases find the itanalytics database and expand data sources where you will find a listing for the itanalytics data source right click and select properties and you should see something that looks like the following screenshot what we will change is the security settings from default to the service account we are using for it analytics when you click on the a new window will open up select use a specific windows user name and password and provide the correct information my system looks like the following screenshot restart the sql server services and your dlp cubes will process correctly posted in dlp it analytics symantec tagged configuration dlp troubleshooting leave a comment if you are using symantec dlp you should be using it analytics posted on january 16 2015 by jonathan overview of it analytics it analytics provides cube based reporting pivot tables additional reports and key peformance indicators kpis for various symantec products symantec it management suite altiris symantec data loss prevention dlp symantec critical systems protection csp symantec endpoint protection sep it analytics is developed by bay dynamics but is available as part of your symantec license for more information visit http baydymanics com products itanalytics symantec one of the concerns in the past for using it analytics has been the requirement for a symantec management platform smp also known as altiris to be configured first before you install and manage the cubes this is no loner the case as there is a stand alone version of it analytics available this will be covered in a separate blog post this post will cover why you should be using it analytics for your dlp system why it analytics for symantec dlp within the symantec dlp console there are a bunch of ways to slice and dice the data that is generated in the system incidents etc either by filtering the data or by creating various summarizations of the data it analytics adds several items that are not exposed without having to write a sql query or leverage the api it analytics allows for someone who does not have access to the dlp console to run reports against the information also it analytics can easily create trending reports to demonstrate how risk is being reduced over time whenever people ask me why i should bother with it analytics there are two reports that i point to that demonstrate the value of it analytics user login report user action auditing report the first screenshot user login report shows which users have logged into the dlp system and the second report user action auditing report shows who has changed what policies in the dlp system these two reports are requested over and over by customers how can i prove to my auditors or management that no one is changing a dlp policy randomly this information is coming out of the oracle database but without ita you would have to write a sql statement and then clean it up to provide auditors or management incident trend by product area a third common request is how can i show trends in my dlp system and the above screenshot shows this trend finally it analytics provides key performance indicators both predefined or custom created demonstrate how your symantec dlp system is reducing risk over time and how the system is performing how do i get it analytics it analytics is provided free of charge however a license key and the msi is needed before you can install ita if you have symantec endpoint protection in your environment the msi for performing the installation is located on the tools portion of the media however if you are not a sep customer please contact either your symantec account manager or bay dynamics note my company its partners can help you obtain the license posted in personal tagged datalossprevention dlp symantec leave a comment can i install symantec dlp on a red hat linux system with a pre defined user name posted on october 3 2014 by jonathan recently i was doing an install of symantec dlp on a red hat linux box that was a member of ldap and had the home folder automounted and didn t allow for us to write to that folder when a new local user was created via the adduser command it would not work without passing a command line option to change the location of the home directory adduser b opt users during the install of symantec dlp the installer creates a user protect protect_update and would fail because the home directory home protect could not be created so the question was asked can we create a user populate the home directory outside of home and then perform the install of the system answer no the installer for symantec dlp needs to create the correct users and must be able to write home when creating the user there is currently an enhancement request within symantec to allow a pre created account posted in dlp symantec tagged how to symantec tip leave a comment 4 5 cool things about data insight 4 5 posted on june 13 2014 by jonathan symantec data insight di can help customers who struggle ith identifying data users and owners for their unstructured data di helps a customer answer the following questions who owns the data who is responsible for remediation of that data who has seen the data who has access to the data what data is most at risk so what s new in data insight 4 5 here are 4 5 get it things that i find awesome in this release self service portal to help make remediation easier a portal that allows data owners and or custodians of data to be able to remediate items directly potentially without the need for it security actions can come from either the data loss prevention enforce console or the data insight management server depending on the workflow a custom can create workflows that are specific to their own environment or use one of the pre defined workflows such as entitlement review review the user permissions on the folders and suggest changes to the permissions dlp incident management review policy actions and take actions on the files that violate dlp policies without having accounts on the enforce console actions are smart response rules that are used to remediate the items that violate a dlp policy an example would be triggering a smart response rule to encrypt a specific file ownership confirmation confirm the ownership of files or folders di will infer the ownershiop of a file this lets you confirm the file is actually yours this portal will be installed on a separate server from the data insight management console is a separate license and requires dlp 12 5 or higher to be installed additional supported platforms for filers data insight 4 5 now supports the monitoring of netapp cluster mode emc isilon and windows server 2012 table 2 4 in the data insight release notes covers the supported platforms for di 4 5 enhanced reporting with data insight there have been improvements and changes to reporting with the addition of some enhanced reports including reports based on user reporting including the ability to track unresolved or migrated sids additional charts and statistics to help understand what is happening on the data insight server s in your environment a health audit report that runs automatically at 5am that helps you and symantec support if needed understand any issues in the data insight environment enhanced data owner computation data insight can calculate the the owner of a file and then populate that within the dlp console in di 4 5 we can exclude deleted or disabled users or their sid when calculating the actual data owner however if you would like to still display this you can show it on the inferred owner report data insight now provides an api specification for the data insight query language dql the dql provides a way to extract and interface with data insight data this is now available vian an api so you can integrate with 3rd party applications posted in personal leave a comment welcome back hex posted on march 31 2014 by jonathan years ago i posted ab...