If you are working with MVISION Cloud, do the following in DLP Settings.
At least one policy that includes a rule set and a rule needs to be applied before integrating with MVISION Cloud.
The workflow of applying a policy to MVISION Cloud is restricted to make sure that the Trellix DLP Policy and Classifications are pushed simultaneously. The policy is pushed from the DLP Policy Manager → Policy Assignment page using the Apply Selected Policies action. This action pushes classification names and IDs to the MVISION Cloud UI for use in cloud policies. It simultaneously pushes the policy to the MVISION Cloud DLP back-end scanning service.
On the Trellix ePO - On-prem menu, select Data Protection → DLP Settings.
On the MVISION Cloud Server tab, select the MVISION Cloud Connection checkbox.
The text boxes in the MVISION Cloud Server section and the checkbox options in the Modules section are activated.
Enter the user name and password.
Click Test Connectivity.
The Connection status indicator displays success or failure.
In the Modules section, do the following:
To enable reporting MVISION Cloud incidents in DLP Incident Manager, select the Pull incidents from MVISION Cloud checkbox.
To enable pushing a Trellix DLP policy to MVISION Cloud, select Push DLP policy to MVISION Cloud, and select the policy to synchronize from the drop-down list.
Click Save.
On the Trellix ePO - On-prem menu, select Automation → Server Tasks.
Locate the task DLP Import MVISION Cloud Events and click Edit.
On the Description page, in the Schedule status section, select Enabled.
On the Actions page, verify that the checkbox is selected.
On the Schedule page, accept the default settings or edit as needed.
On the Summary page, verify the settings, then click Save.