Video: Office Hours: DLP Ask Me Anything | JUL 2025 | Duration: 3764s | Summary: Office Hours: DLP Ask Me Anything | JUL 2025

Transcript for "Office Hours: DLP Ask Me Anything | JUL 2025": Okay. Let's, I guess, started. Hey. Hello. Welcome to today's post point. Hope as always. So the main focus will be on Forcepoint DLP. Quick self introduction. My name is Vincent. I'm the senior customer success architect, from the OCS, organization. I've been working in the postponed for more than ten years. So to get together with me, we have one two of our most experienced support expert, from our tech support team, Senthil Kumar and Priey Ranjan Kumar. So today's session will be, ask me anything format. We try to minimize the use of slides, presentations, And we're trying to cover as many of your questions, around the Forcepoint DLP. And, so we have received lots of Priey submitted questions and, for that. So we're gonna address those questions and tell any of the question that you will ask both. So before we, get started Just, a few quick things we want to go through. So you will be able to enter, anything they want to ask, our VLP expert from the q and a tab at any time. So the session will be recorded. So you're gonna have a email notification later today or tomorrow with a link that you can watch the playback anytime. So a few minutes before we end today's event, I'm gonna push out the survey. There'll be around five or four questions, so feel free to, to fill fill in your feedback, your comments, or what you're expecting or how, you know, this event should be, to be hosted in the future, that we know how we go, and, you know, we can make, actions or changes in our future sessions. Okay? Now let's, get started. Since you feel free to to start with the deck. Yep. Hello, team. Good morning and good afternoon for everyone who have joined this session. We welcome you, for this focus service program. Thanks for joining the session now. And let us just get started with the, slides. That's whatever that is, you know, I requested. Right? So the first question, which I would like to know, that is about how to check data transmission at channel level. Right? So, each and every, channel right, for example, endpoint, protectors, ERC, like, for gateways. Right? Each and every, has a different method of, you know, collecting the data. But at a single point of contact, you can erase the health option on the UI, k, where you can check the number of, you know, transactions that are hitting the quality engine. I would like you to cover what is the number of, you know, transaction that is based on the system for, like, a per hour basis. Based on that, you can collect the details as well. Right? So that should be, helpful. Let me put it hand handful of information. Right? Any case, if you have you want to, you know, deep dive the system to understand, more about the, you know, TPS, then what you have to do is you have to work on the capabilities. Since you it looks like you have some issue with your your song, your voice. K. It's not here now. Is it okay? Hello? Yep. Pressing panel. Is it okay now? Yep. So Probably, since since you you can, manage your sharing screen and see if it'll make some difference with your audio. See if you can yeah. I'm trying to run this on, like, again. Mhmm. Yeah. Is it okay now? So k. To start with, how to check the how to check the data transmission at channel level. You can leave it in system health to understand the overall, transactions per hour. So the system health will have the information about the, policy engine, which collects the note transactions per hour basis so that you can be able to calculate the number of transactions, even per second. That will be the TPS for the policy engine. Right? So regarding the, second question, what is the best approach to implement a Doctor setup? Right? So, ideally, with first point, in place. Right? So we do not have a specific, what to say, a certified mechanism for DCDS setup, but many customers are leveraging this option, right, by preparing a parallel setup and then trying to, you know, do a back end restoration and ensuring that the parallel server will be a Doctor setup. Right? So in that scenario, you can very well go ahead with that. The only option left out here is in your manual process by doing a backup restoration as an option. Warren, the question is about the IP change. Yes. The IP address should be changed in the parallel server for better network connectivity, and then that shouldn't impact the restoration. Once the restoration is completed, ensure that you'll be modifying the DLP setup, and then you should invoke the new IP address mapping in the SQL. That should be helping to invoke the new IP address in the SQL, tables. Right? And regarding the endpoint connectivity, yes, it will be a manual process where the supplemental servers connected to the DC should be manually pointed to the Doctor server so that the endpoints already connected to the supplemental server should get reported to the Doctor setup, and you should be able to receive the instance accordingly. Right? So automatic synchronization actually is not a feature with us, and whatever the process which we have sent should be a manual one. So so the process should be a manual. It it's it's in terms, like, you know, about back registration, registration part, client management, everything should be on manual process only, and we don't have a automatic communication here. Right? Regarding the third question, disabling the browser extensions only, not the complete endpoint, DLP agent. Yes. But there's a being the browser extension. The only option left out is to use the inline proxy method where you can enable the, option in the UI, the endpoint profiles where you can just disable the browser extension and enable the inline proxy for all the endpoints connected to the profile. Right? What is the best practice of, you know, DLP access and backup registration, including conflicts and logs? Yes. This will be the, complete backup restoration method where you have to collect the, DLP backup complete d f DLP backup including the SQL, and then you have to do the restoration using the service account. You have to log in to the, the system server using service account, and then ensure that, you are doing a modification of the DLP installer and perform the backup restoration. And please ensure that during the restoration period, ensure that the antivirus is not, intervening the, you know, backup operation. Right? And we have also mentioned the, backup frustration, article, the guide where it's already been presented in the last, the earlier office hours program. Right? When Forcepoint will cover efficiently the mobile devices. So the current Forcepoint API endpoint delivers features of mobile policy and reportings. And note that the mobile API policy applies to mobile email only. Right? And you can just verify the, referenced article. Right? Let's move on to the next slide. Since you can we, just move one slide back along to add some insights about the question number five? Thank you. So, just adding some inputs, on top of, since you use inputs. So currently, the licensed, post plant, DLP endpoint customers will be able to leverage the feature of both mobile DLP together with the reporting and the logs and the coverage. Could you do my screen sharing? Can we share the screen? Okay. Thank you. Should I share the same instance? That's fine. That's why it says here. I'll move this to me. The yep. So So, currently, the the mobile DLP policy applies to the mobile email only. And, because the question is about both where we'll cover efficiency on mobile devices as well, you know, data, data loss promotion. And, but we do have plans that we sort of consolidate, the the endpoint protection on the mobile devices not only on the, you know, the DLP part, but it's also on the web you know, web security part. But functionality will be integrated within the, the endpoint flight. So we'll get we will be targeting, releasing more, you know, release and updates, from end of year to next year. So other than DLP for mobile devices, we do have other channel that we're gonna provide and deliver additional protections on the mobile devices. Just a quick, inputs Thank you. Question number five. Yeah. Over to you, Senthil. Thank you. Thank you. Let me show you next slide. Yeah. Hope you're able to see the next slide. Right? So this is the sixth question, where the question is about, I'm unable to deploy the classifier agent via, PDQ and GPO. Via PDQ, there are messages that put back that found and various troubleshooting methods have been unfruitful. Any suggestions as it is unfeasible to install manually on 600 plus endpoints. Right? Basically, the endpoint installation, is through, like, whenever you install the agent, you have to execute the, EXE package. It will be here, the EXE package, come with an EXE package, basically. So we are not sure what is the PDQ, what to say, MDM the MDM device or MDM, agent. But what we address is whether you leverage the GPU option or SCCM option, okay, using the EXE methods. Right? During the time, if you got any errors, please help to provide us the specific error message, the installation logs, and then submit it, as a support ticket. They'll surely help you on that part. Right? So what are the plans for the manifest b three extension? Yeah. I can stop with that since you're Sorry, guys. Yeah. Yeah. So for the the v three, extension, I think the question is mainly, you know, asking thing about the the goal model, you know, plans for Forcepoint to further improve the stability of the v three extension as well as, you know, it is content, compatibility with Postman DLP and the agent. So we do have plans that we're gonna release one more, extension of the, the f one, agent within the month. So the major focus is not upgrade or release a brand new agent up upgrade. It's more like, you know, the changes will be all around, you know, improve, inclusion back pieces, within the extension. So that'll give our customer, you know, anyone anyone who have already implemented the most recent agent, much, you know, workload to upgrade the agent. So there'll be no more additional feature release, but it'll be all about, you know, the enhancement to include most of the, you know, existing or being reported product, agent issues that we have been, you know, received. So in terms of the stabilization or, you know, time frame, we have, starting from twenty twenty five zero six, that wasn't literally, you know, include most of the recent, issues that we are we have been reported. So that's, you know, moving forward from that, this day, you know, we're expecting the the agent as well as, the process extension, you know, will be able to run-in more stable, you know, stage going forward. Now I can move on to this the the next one. I understand there are some conditions I'm asking about. One, Adobe is able to to to sync up or work better with Microsoft extra ID, secure ID. So, I've been meeting with those client product management team. So that feature has been, you know, fully developed and in the in the next, final stage of being finalized. So that'll be including with the filters and the integration with the, you know, policy that, with, Azure, extra ID. So if any of you would like, more information or inputs on this one, do reach out to your account manager or custom success manager, then we are able to provide more insights of the interface or exact, you know, feature that we're about to release. And there's also opportunity this feature will open for, earlier access for customers. Right? So feel free to raise that to, to your CSM, and then we can take your inputs and then see, you know, what's the best that we can take you from there. So we want to pause here for for one minute. And then if you have any questions, I've feel free to put that in, in the q and a section, since you and pray that we, you know, we can take your inputs that we can do with some real real time interactions right here. Okay. So I I'm gonna cover number nine. I understand there are lots of questions asking about the road map or, you know, the potential, you know, timeline that one, Postpart will be releasing the the newer version of TOP, and what's the role, you know, what's the region before it's going to to a further further planning of what functionality that we want to further, you know, invest and improve. So the 10/2004, version of the OP is planned. You know, we're targeting for full release between q three k and '4. The the, the the current timeline that we we received is September, but we're annoyed for any changes or immediate, you know, future development. So for any further update of the EPAs, we will reach out to, you know, your c, CSAM or CSM, and we are able to, you know, provide you with the latest, information from that. So the OCR engine change in next release, the answer is yes. So next version will be able to upgrade and not literally change the underlying mechanism for the OCR engine to work to function so the performance and accuracy for the OCR will be improved briefly. And the ETR functionalities, extended for discovery task, we will need to confirm with the product team a lens set to your pre having other inputs, and, we can cover, you know, this question, you know, what later events. And one will be released protector based on Oracle Linux. So the we're talking into so, currently, the, the the 2.3 the 2.3, DLP protector already being released for, Red Hat, eight. But for all Linux, we're targeting to include a software package, by q three to four. Most likely, they'll be around September as well. Yeah. For for the whole, Forcepoint security management, you know, manager of the OP, and we do have, you know, some further enhancement. For example, from October, we are happy to to deliver a function that we allow customers, you know, users to do a rule of policy clone. And, since, you know, that'll be part of the scheduled and planned feature, that'll be released together with 10.4. But, again, you know, for most of our recent, information regarding to the re new release, we shall to, you know, CSM team that we, we are to follow-up with you and provide you a more instant answer for that. Thanks, Vincent. I'll take care of the, next slide. Okay? Yeah. Yeah. Okay. So this is about the next question. Is DLP rules available per user and per device? Right? So policies in general will be applied to each, endpoint agent. If it is a endpoint agent, yes, it's through, endpoint classifier. Endpoint classifier will extract the policy information. Right? So each and every, agent where the endpoint agent is installed, the policies will get applied over there. So it is per agent, per system based. The policies will get applied. Right? And if it is through network, gateway, like ESG or, you know, protector or WCG, that is also per system only because each and every system has a unique IP address. Right? So the policies are applied for each and every system, but the policies are applied centrally from the respective gateway where the policy is similar updated on the respective policy engines. Say, if it is WCG, then there is a separate policy engine. For ESG, in particular also, there is a separate policy engine. So each and every system which is reaching the, policy engine for analysis, the policies will get applied. Right? So this answers the question. The best and easiest way to install DLP dot rexD agent via Microsoft SCCM. Yes. There are two methods. As I mentioned earlier, you can use the SCCM method. There is an article around it, a public article around it, or a GPU method. Right? You can push the EXE agent through SCCM. Ensure that proper privileges and permissions are applied on the client's machine because without proper permissions, there are chances that the installation may break, and we may not be able to track how many machines are having the installation issues. Right? So please take this as a prerequisites before performing the installation. Next question is about trying to deduct copying data to the mobile media, which are redirected to Citrix virtual desktop, and you have also followed an article. Right? That is an, help guide, with respect to the, what is it, Citrix, virtual desktop. And Forcepoint LP endpoint does not support the following endpoint destination channels in Citrix virtual environments. That is the mobile media, CDDVD. There is the, burning bill writers, application controls where you apply the cut copy paste operations, print screen, and the land channels. Right? Both this helps. And how to get Forcepoint DLP admin certificate. Alright? So is this support is is this, about the admin certification? Then, yes, you can go ahead, by registering the EFT Cyber Institute or customer hub, and you can contact the sales team or the CSM team for registering into that cyber institute to get your credentials and ensure that these certifications are done are, like, applied and not done successfully. Right? How to determine when a DLP policy has last been modified? Yeah. It should be through the audit log section on the UI where you can find the last policy that got changed. Right? So hope this helps. I'm just passing it for a minute if you have got any questions on this. And, Vincent, would you like to take up any anything related to the, PM or, anything related to the, you know, product development side? Yes. I think they're all being properly addressed. Yeah. There's no further for the comments from from product or from my perspective. I think we're good. Okay. Thanks, Vincent. Let me just go ahead to the last, slide. Right? That's the last question. Let me know. Yeah. Last question was, what rules do you recommend that can be useful for monitoring specifically new hires other than the general rules we already have set up. Right? So in general, right, for new hires, what you can do is you can create a separate group of, like, you know, user set, right, in the active directory and perform a LDAP import Then ensure that specific group has a different policy set or a different rule set. And you mentioned that, in the policy level, ensure that the new hire policy level is on the top or whatever the level you wish, and you apply a separate action plan for that new hires. And you can just monitor based on the active directory import, whether it can be a group or set of users, right, or a OU, right, that that will help you to manage the policies for the new hires. Right? Is there any plan of upgrading the endpoint pop up confirmation message functionality? Most specifically, having the name of the file that triggered the pop up shown in the confirmation message rather than having to forward the icon to see the file name. Yes. There are plans to, you know, change the entire power message pane to optimize. For that, yes, you may reach up, to the CSA or the CSAM about the plans and when it will get implemented. Right? Additionally, on this one, any plans on instances where a user move multiple files, and instead of having the pop up for each file that triggered the rule, why not have one single pop up that lists all the files that trigger a rule in that one bulk action? So this this also will be a a feature request as of now. Okay? That will take it up to the PM. Right? So please help us, with any, like, you know, questions you have, right, so that we can go ahead and answer on that part. Right? So now if you've got any questions, you just post in the chat window. We'll be able to, you know, guide you on those questions. Vincent, if you want to take it up for a moment. Yes. Yeah. I was trying to get yeah. It's just it was really the the last questions, and I probably can take one or two. I I see a question have more fields. Yeah. Yep. I see a question from Ahmed. What happens when I have a d r setup and all the servers in the main site fail? How can I make the endpoint agents point, that were originally pointing to the main site set for some point towards the Doctor set for some instead? Okay. I think we have covered in the question section. Whenever, any of the site, right, either it's a DC or a Doctor, it goes down, say, consider DC goes down, then what we have to do is we have to manually, you know, register the suspect two endpoint servers to the Doctor site. Right? Because Doctor is also having SSENSE server. Just register those endpoint servers to the SSENSE server, the Doctor SSENSE server, so that the endpoint client already gets connected to the supplemental servers, which got registered to the Doctor SSENSE. So the instance will flow as expected. Right? So once you do the registration, ensure that the deployment is done successfully on the Doctor. Then the new instance would fall into the Doctor. Right? Hope this helps to answer the question. And next question is, in endpoint profile, there is no option to add the users based on username only. We can add through computer group. Does it make sense to use only computer groups? Yes. So as we told earlier, we monitor the agents. Right? So, ideally, we don't have an option to add the usernames on the endpoint profile. Instead, we can add only the respective computer host names or a group that contains the host names. This is by design. We cannot change the design, so you have to either use the host name, separate host names, or you can import the computer group from Active Directory and add the group to the endpoint profile source expert. Right? Hope this helps. And let me okay. Can anyone get the DLP admin certificate? Yes. We already answered this question. Is this about the DLP, what to say, administration certification? That is the case you have to, you know, leverage, the, you know, sales channel, a CSR channel so they'll be able to help you out to register for admin certifications. Okay? That is the question from. When transferring the FSM from backup in case of disaster from one DC to other in other cloud, what should be changed? We already prepared full copy of our installation, and the only thing to transfer is FSM. In this case, we can leave the and only change IP to new one and connect components, or we can keep full copy of the system in other cloud as well for Doctor. Okay. What we advise is you can ensure that you can take a complete backup of the primary of the server. And then the other server where you are going to restore, please ensure to have a different host names, a host m two, and then a different IP address. Right? That will avoid any sort of a contract during deployment. Hope this helps, Our next question is, are you planning to create, release, or develop a special annotation tool for f and e? Because as partner, we knew that customers are dealing with uninstallation problems. That's a good question, as a host. Vincent, we have got lot of request regarding this, f and e uninstaller tool request from many customers. There is a FR already in place. I think PM team is prioritizing that request. For now, there is a there is no special or a unique uninstallation tool or a common uninstallation tool for all the customers. But in case of a special scenario where if you're facing any sort of a administration issue, you may write a support ticket. What we can do is we can work with our engineering development team to develop a station tool for your specific request based on the domain, based on the company or the customer domain, we'll develop annotation tool for you for that moment. Right? So that won't be a common tool always, but that will be annotation tool at that moment for the specific domain, the company's domain, actually. Okay? But sooner, they're expecting a another station tool from our product team. I think, Vincent, we can take this Yeah. Yeah. We can do one. As well. Yeah. Thanks. Since you end it thanks for the question now, So, apologize. We we I think, we didn't put a whole of your question to the, you know, presubmit, question. But, as what since you introduced, we are aware of this, you know, requirement, and, we'll be working with the engineers and, project, product managers. And we expect him to deliver such tool for customer because the the variation of, you know, different deployment of, you know, agents, keep changing. We understand, you know, the asks there. And, so, also, you know, the the changes on top of, you know, the whole Forcepoint agent consult consolidation precise because we've been trying to build up and consolidate all the other products, agent into you know, on top of the existing Forcepoint One agent. So the we we we can we'll keep you updated with what we have, you know, updates, within engineering or Forcepoint PM. Probably, we can cover this in a whole lot, you know, later, later session like this. But, yeah, thanks for the question. Thanks, Vincent. So that is the next question from, Senthil. I have a NAT on management server. How can I deploy endpoints? So, basically, we do not, suggest to do a NAT operation on the, FFB server. So, ideally, it will be a public facing done. So in case, if you're destined to do it, then add supplemental servers. Add those additional servers to the public or the DMZ domain so that you can connect the endpoint to the DMZ servers. There is a separate article for it. You can follow that and ensure that the endpoints will connect to the DMZ server on the specific security and whatever you're going to add into the network. Right? So let me just cover up the next one. Okay. Yeah. That's the question again from Ahmed. Endpoint agents will not be able to migrate the endpoint agents separately. What you have to do is endpoint agents are already connected to the specific endpoint servers. So you have to just move the endpoint servers along to the SSM server. In case if you don't have a endpoint server in the middle, you have to directly, create a package, reinstall the agent, and then point to the new servers on the respective Doctor environment. So that we are quite a man manual manually intensive process. Right? So the best method is to use the endpoint server in common so they can so that you can just reregister that server to the new SSM server. There is one more question from Imran. There are two policies. One is PC credit card policy, and the second is account statement blocking policy. One, that's for account statement statement policy users from PC credit policy. So this one needs a detailed review because we need to understand, what is that account statement blocking policy, includes, for exclusion. Yes. You can perform exclusion, but we should be taking precaution that the specific exclusion shouldn't bypass the DLP scanning for the Visa credit card policy also. So this is a detailed review. So maybe you can write the support ticket. We can work on that part for sure. And let me just go with the next question. I think most of the questions, yeah. When OCR will work on the cloud, from Mohammed. Yes. There are plans to implement OCR on cloud, but not not now. It's not, in in place right now. But there are some requests on this. Vincent, you can take this part to PM. I think that is a feature that's already opened, and that is a work in progress. But right now, we don't have an ET about it. Right now, we can leverage only the postcard on the on prem only. Okay? Let me move on to other questions that, there is no answers. Okay. Senthil, there is a question from the Ahmed. Okay. So that was from 12:56. What happens when I have a Doctor setup and all the endpoints over in the main site fail? How can I get it? I already answered. Sorry, Ranjana. You already answered. Okay. Yeah. Basically, there is a question from Parambel. Basically, we I don't want to block the mobile media, but we want to monitor data transfer done from Citrix to the mobile media. We want to check what data are being transferred. I think you are answering this question, Pradanshu, regarding the Citrix part. Yeah. Citrix, I already answered. Is there anything the test one came? Yeah. From Parmel. No Parmel. Okay. Basically, I don't want it to block the remote media, but I wanted to monitor. Unfortunately, the Citrix, we do not support the removal media because when you connect the removal media, it is on the physical machine, and Citrix is a virtual virtual machine. So it this channel is not supported on the renewal media on the Citrix machine. So that that's for the example, like, when you have, Citrix applications to be launched, you are launching on some physical machines. And there, you are connecting that, remote media. So if you have the endpoint in installed on that particular physical machines, then it can be monitored, blocked, action as per the policy. But when it comes to that, the within Citrix, it is not feasible because it is not supported. Okay. Thanks, sir. So that is a question from, Yes, Joshi about the extension part. Right? The extension enablement, to the inline incognito infrared incognito mode. Ideally, we got a data assessment engineering team recently on a specific account where we do not support incognito mode. Right? That's like, you know, we do not support incognito mode, for, you know, extensions, in in private incognito mode. Suddenly, we do not have control on that incognito mode part. Certainly, we'll not be able to, help you out the how to, you know, control the extensions on incognito mode. The best method is to, apply the group policy, to ensure that users doesn't have access to the in Cognito mode. That is what we that is what we can advise for for the users as of now to administrators. At the inline proxy also, we do have, you know, certain improvements in the latest versions. And, yes, engineering team and development team is still working on the Lenoxi part. And sooner in the in the, higher versions of the release, the Lenoxi also will have betterment so that based off extensions, you can use the Lenoxi as well. Right? And then okay. Do we have any DLP playbook for data breach? Vincent, do you have any answers for this? Could Yeah. I'm looking to this by arm. My Mehmet, do reach out to your CSM if there's any or the postcard account manager. We we we do have that playbook, but, we need to check how the best we are able to share with you. We wanna ensure, you know, that's the right resources that you are looking for. So we we're gonna follow-up with you, of of the session today. Thank you, Vincent. And let me just read through any other question that left unanswered. I think most of the questions are answered. Let me just what certificate is required for creation, the Intune Windows package? Yeah. The certificate will be the same for Windows package. Right? The c dot c r file. That will be part of the, endpoint package builder. Whenever you build a package to endpoint package builder, you'll be placing a c dot c r file. The same certificates will be used for Intune deployment files. It should be part of the EX part of the EX you create, that sometimes the CRR file included. We don't need to present the separate certificate for it. The next is Will this will the questions from the section be duplicated and text in the PDF? We're there to have an option to look through them once again. Vincent, we'll be sharing these questions. Right? It's already they can download it. So, somehow, you can download it from the q and a, near the docs. There is a docs section. You can download that specific, you know Yes. Flights. Yeah. I think so. Yeah. I think we should be having a way to to to download and access the how we discussed questions. Yeah. There are some, mentioning about the audio quality was bad during the time when we have started the session. If Amanda, Daniel, and Thomas, are you able to hear us properly? CalGale. So few of your, release had got some, you know, voice issues. So hope, it's okay. Great. I don't see any questions from the team yet. Just give a couple of minutes. So to how how we answered the Dubai from, no around bill that the remote media that we want to monitor data transfer than from Citrix. Is it is it also by. Yes. Correct. Cool. Cool. Okay. That is the next question from. When may I use the DLP? Should I install the web module also? Okay. Basically, WebDLP, you can achieve through two methods. I would say, like, three methods. One is through, endpoint HTTP HTTPS using the endpoint channel, and the other one is through proxy. That is the reference content gateway. That is the core WebDLP solution where you don't need to purchase the security license. Instead, you can use the WCG as a stand alone, box, and then you can register, the WCG with the, DLP, you know, web gateway license and network license. You can directly register the proxy with a DLP solution, and you can use that for the DLP purpose. The third option is you can use ICAP, client, maybe your firewall or if you have any other proxy solution like ZipKiller. Can do an ICAP with, protector. If you have a protector in place, you can very well leverage the ICAP server option, and you can use it for your DLP purpose. Hope these answers. Thank you. Recently, we moved our mailbox from on prem Exchange to Cloud m three sixty five. So what is the question about it, Tajik? Please clarify more. Right? So let me just answer here. We install mailbox for obvious exchange of cloud. Okay. Do we have any prerequisites, documents, and installation steps available for implementing PostMind DLP setup? Yes, Sayed. There is a specific document around it. For each and every version, you have a release notes which includes the prerequisites, installation steps, upgrade guide, installation guide. Okay. Everything is available. You can just go to Google and search for Forcepoint version number. Say, for example, 10 dot two or 10 dot three. Mentioned as release notes. The release notes contains all the information what you requested. Okay? Next question is from Mohammed. How can we create a policy to monitor the internal users transferring company, data to personal public, email IDs? I have tried email similarity condition, but not working as. Okay? You already know about the internal users. Right? Internal users transferring complete data to personal public mail IDs. Okay? Personal public mail ID is which is it a a public domain or, say, internal domain? If that is the case, what you can do is you can have a gateway in place. Right? Say, a protector. You can just monitor the, internal, you know, email. Even if you can have a protector, to endpoint. Also, you can mark as internal, and then you can check the data transfer through internal, you know, traffic flow. If both the domains are internal, if one domain is public, then we can just choose the outgoing, you know, option to monitor the outgoing, email to the public mail IDs. Right? But we cannot monitor the, data transfer transaction via mail ID. Instead, we can monitor the data transaction through the domain, the session domains. Right? So in case if you have a network gateway in place, then there is one workaround for it where you can use the custom computer custom create a custom computer with this specific email ID and then have that transferred in the registration. So that with that option, you can monitor the salary as well. Okay? Because the HR, please the support team with the case number, we can surely guide you on that part, more than us. Okay? And next is, can you share any document for Palo Alto if you integrate WCT with Palo Alto? Okay. For this question, Ahmed, we cannot integrate the WCT with Palo Alto for DLP solutioning. Instead, you can integrate the PAL Alto with protector, a side cap server for the DLP purpose. Okay? How can I check the data in password and then click that file? Is there any tool or option for that? Password encryption. You were asked about the, endpoint password encryption. If that is the case, we'll not be able to check the password for it. We don't have an option. It is already encrypted. Right? We'll not be able to have the password information over there. Just looking for another questions. So do you have a quick quick one? I think we, we got a follow-up question from, Anat. I got you. And then, I mean, Matt, he's saying, also housing loan. I can so thanks for the ask, Matt. So that that's the reason, you know, we recommending initial, you know, integration within, you know, the Forcepoint, you know, portfolio. So, understand that, you know, the limitations there, but Forcepoint comes in gateway and, you know, the web protectors can be deployed with ACAD. So, you know, with with such, you know, scenario, feel free to reach out to you. I'm not sure if, you know, that's, upholster sales or implementation, if it is any Forcepoint pro service involved, who reach out to. You know, if it is peers or CSM in charge, reach out to them. We are able to work with you and find the best way to fit in that, one product. One more thing to be added. If that, if I'm considering Palo Alto as a proxy, then you can have a proxy chaining as well if you're not having that, ICAP. So you have to deploy our WCG to integrate with the proxy chaining. In this case, we'll be able to do that. We put Right. But, why I answered about the direct integration is direct integration from Palo Alto to DLP server is not possible. It's not possible. If you're having yeah. That's not possible. But Palo Alto with WCG proxy training is possible where you can forward directors from Palo Alto to WCG. Then the WCG can be integrated with our DLP solution using WebDLP. Right? Yeah. For the steps. Okay. My firm wants to use Forcepoint DLP, and they should be the person responsible. This is all new to me. Where should I start to learn as much as I can? Vincent, should we direct Alan to reach the partner channel team, to get some learning materials, and training part? I think so. Yes. Right? Yeah. So great. So, Alan, I think, like, you can very well reach the, partner channel team or our health health teams where they'll be able to help you out in training you on the Forcepoint DLP product, and they can help you with your training materials as well. For Ahmed Dore also, like, there's a question about proxy chaining for Palo Alto. Right? We can, send you the document. Proxy training, we can send you the document, but it's required also help from the Palo Alto side because there's some demand dependency on the authentications between the proxies and certificate. So you need the documentation on the both side. One will be acting as a master, one will be acting as a child. So we can provide you our own. And, I think it's better to raise the case with us. So our, we have the respective team related to that debate, which will help you on this part. Yeah. I just mentioned thanks. Right? Let me just answer to, Yeah. Hope that helps. Any other questions about the the section, usage? Okay. I got a question. I got a question from Ajit Kumar. Recently, we moved our mailbox from on prem exchange to cloud, and mains sent internally are captured under endpoint HTTPS channels. How to avoid internal main monitoring in this case? It's very simple. What you can do is you can uncheck the internal monitoring option in the global, mail setting in the endpoint settings that is at under under mail section. If you go there, there is a internal option outbound option. Uncheck the internal option, then this will be avoided. Okay? Hope this helps. Alan, Landau, thanks for the question. My friend wants to use Postman DLP, and the question, is gonna be, learning how how, Forcepoint DLP is working. So you can leverage Forcepoint. You know, there's lots of resources for for customer and partner, customer hubs, in in institute. And, if you have any questions, with a ticket, and I will give you instructions about how we are able to to learn. The navigational, you know, product GUI is user user friendly. It won't take you too much, you know, hyper to to to to, catch up. And if you have any questions or conditions, we are more than happy to to to help you. So I think at this stage, I'm gonna put up all the survey. Just wanna all, you know, want to see, thanks for all the attendants that are on this session. So myself, since you already have been working as hard we could to cover as many questions as we can. We always hear you know, I'm working, from, you know, CS, CS team and the Sensio, create from support, and working from, you know, back line. I have direct connection with engineering. I have my regular, you know, connection, making these PMs. We'll be more than happy to hear from you. So either from support tickets or any of the, discussion, you know, channels through c s CSM or our account team. So that will be a continued effort. So we're not gonna, you know, stop the engagement just, you know, of of the meeting of the session today. So we're gonna be looking forward to hear from you. And, for both one, we're gonna have some further enrichment of the ask me anything, events in the next few weeks for v three and for other topics around BLP. And, again, you know, we're looking forward your, your input, and feel free to let us know how you think. Since you're free, let's, let's take, let's go through the remaining questions in the last few seconds. Sure. I'm just answering to Syed Ibrahim. So he's asking for a training session and material for implementing DLT. Right? Okay. Alan has asked for, like, no where should he open the ticket? Or the email is so someone can send the starter guide for Alan. I responded. Responded. Right? Great. I think you can respond to, Syed Ibrahim also. Let me just, respond to him last week. Can you just respond to Syed Ibrahim also, please, to the same article? At 01:23PM, he had requested the training material. You can use that, you know, article to him. Yeah. But I can't edit it because since you already answered. Okay. Have we, replied address address Kumar's question regarding those, the the the email migration from conference to service as well? Which one, Vincent? I'd like to figure it out. If we go down this gadgets tomorrow? Adjust tomorrow. Yeah. I'm done. Yeah. Okay. Team, once again, for everyone, who have joined today on time, And, thanks for joining. Thanks for the interaction. Right? So Rehan Damasur Yeah. We're calling now. Question. Yeah. What is the question from Rehan? We didn't get there's a issue when instance occurred and take a long time to report. We can be the automated response rule. We will quickly please. That's what time the question has been, raised? Oh, it start with the support tickets. Mhmm. Rehan's I didn't get Rehan's question. Can I just post it? Let me just ask him again. Can you if it's search yeah. Just search up front. The incident is all cut, but taking a long time to be to be recorded. And so probably it's, it's better to reset tickets. Rahan, I'm not sure if there's any challenges to to reach out to to all engineers, but we'll be able to try to answer. Let me just try to answer, I just post that question in the internal chat, Vincent. I'll try to answer quickly for Ryan, and then we'll post out. Yep. Because I'm trying to supposed to know internal chat, please. Have you tried to answer that ticket? Yeah. And so you got that question? Yeah. Just search for Rehan's name, and then we should be able to get it. Rehan is re posted. Okay. Is that so? Yeah. Rehan ah, okay. That's an issue when incident has occurred and take long time to report. Automate response tool, which automatically writes to his line manager as an observed it has taken twenty two hours to, report. Okay. So, Rohan, basically, the instance which is trying to, you know, report to the SQL. Right? So it has multiple stops. Say, for example, it has to pass to the policy engine, Tomcat, Message Proker, DBS, and then to SQL. So there are multiple hops in between. We have to troubleshoot accordingly. As Vincent mentioned, if we place the ticket, support team, so they'll be able to troubleshoot, like, to understand where this delay could be. That could be because of multiple services involved in between so that we'll be able to troubleshoot and help you out as much as possible. Right? So please raise the support ticket, Ranjan. Thank you. Okay. Looks like we covered I think thanks everyone again for your time, and, we're looking forward for for your feedback, and we can plan from plan from that. Thank you, everyone. Thanks for joining. Have a great day. Thank you. Bye. Thank you. Bye bye.