The Forcepoint DLP Administrator course is designed for people who need to be able to test an existing deployment, administer policies, handle incidents and endpoints, and manage the Forcepoint DLP system. They will develop skills in creating data policies, building custom classifiers, and using predefined policies, as well as performing system maintenance. Participants will explore crucial concepts such as policy creation, incident management, and reporting within the Forcepoint DLP framework. The course emphasizes real-world applications, allowing learners to implement practical solutions that protect sensitive data from unauthorized access and breaches. By the end of the course, students will confidently develop and manage effective DLP policies, analyze security incidents, and leverage reporting tools to maintain compliance.

Course Objectives:

In this course, you will learn to:

• Identify and define basic concepts of Forcepoint DLP.
• Explain the Forcepoint DLP licensing model.
• Create and manage Forcepoint DLP policies and rules.
• Create and manage Forcepoint DLP classifiers.
• Define and create Forcepoint DLP resources.
• Analyze and manage transactions using OCR.
• Install and manage Forcepoint One Endpoint.
• Implement Forcepoint DLP discovery.
• Implement fingerprinting and machine learning.
• Apply policies using third-party file tagging software.
• Monitor and manage Forcepoint DLP system health.

Course content

Getting Started with Forcepoint DLP

• Describe Forcepoint DLP and how it works.
• Apply a Forcepoint DLP license.
• Locate DLP system components.
• Find Forcepoint DLP product resources.
• Overview of Forcepoint DLP Architecture
• Licensing and Activation
• DLP System Components
• Navigating Forcepoint Resources and Documentation

Configuring DLP Policies and Rules

• Define Forcepoint DLP policies and rules.
• Protect sensitive data using a predefined policy.
• Block transfer of sensitive data.
• Update multiple rules at the same time.
• Configure notifications sent by a predefined policy.

Configuring Quick Policies

• Protect sensitive data using quick DLP policies.
• Creating Quick Policies for Immediate Protection
• User Configuration and Integration
• Customizing Notifications with User Context

Adding User Directories

• Add user details to Forcepoint DLP.

Using Dynamic Variables

• Configure notifications with user details.

Configuring Custom Policies

• Edit a script classifier to protect data.
• Protect data using a custom policy and a script classifier.
• Defining Scope and User Applicability
• Including External Users in Policies
• Creating Cumulative Rules

Adding Sources to Rules

• Decide to which users the policy applies.
• Keyword and Dictionary Classifiers
• Setting Action Types per Data Transfer Channel
• Device-Based Policy Exceptions

Adding Custom Resources

• Add users to a policy who are not part of your organization.

Configuring Cumulative DLP

• Add cumulative rules to a policy.

Adding Custom Classifiers

• Add a keyword classifier to use in a custom policy.
• Add a dictionary classifier to a custom policy.

Adding Custom Action Plans

• Configure different actions for different types of data transfer.

Adding Destinations to Rules

• Decide which types of data transfer the policy monitors.

Adding Endpoint Devices

• Add specific devices that are not monitored by a policy.

Adding Regular Expression Classifiers

• Add a regular expression to a custom policy.

Adding Policy Levels

• Configure the order in which policies are applied.

Creating Complex Classifiers

• Create a complex classifier.

Configuring Policy Exceptions

• Change the action of a policy for a group of users.

Configuring Optical Character Recognition (OCR)

• Configure DLP to monitor text in image files.

Installing Forcepoint One Endpoint (F1E)

• Install F1E on an endpoint.
• Configure a temporary bypass on an endpoint.
• Justification Prompts for Policy Triggers
• Application-Specific Monitoring and Exceptions

Maintaining Forcepoint One Endpoint (F1E)

• Give users the opportunity to explain when their actions trigger a policy.
• Configure the operations of an application that Forcepoint DLP monitors.
• Add applications that are not monitored by a policy.

Configuring Discovery

• Monitor data that have been saved on the network and endpoints.

Configuring Fingerprinting and Machine Learning Classifiers

• Protect the data in files of a specific type using file fingerprinting.
• Protect data in databases using fingerprinting.
• Protect text documents using machine learning.

Configuring File Labelling

• Add file labelling classifiers to use in a policy.

Monitoring System Health

• System Health Dashboards and Monitoring
• Monitor the components of the DLP system.
• Take a backup of the policies, rules, and configuration of DLP.
• Exporting Policies for Migration or Audits

Exporting DLP Policies

• Export DLP policies.

Monitoring DLP Incidents

• View an incident in an incident list report.
• Perform a workflow operation on a batch of incidents.
• View discovery incidents.
• View the incidents risk ranking dashboard.
• Use email-based incident workflow.

To see the full course content Download now