Completing the installation includes enabling and configuring the settings and policies for your products.
Configure an evidence server to store the files that trigger a rule.
Configure one or more syslog servers, if necessary.
(Optional) Specify a Trellix DLP Discover server configured as Trellix DLP Server in the Policy Catalog to use registered documents in Trellix DLP Network appliance policies.
(Optional) Enable DLP Capture to store email, web, and network data analyzed by your Trellix DLP Network appliances.
(Optional) Enable a cluster of Trellix DLP Network Monitor appliances to load the balance incoming traffic.
Enable relevant predefined policies and rules.
Create additional classifications, policies, and rules to detect potential data loss incidents.
Assign and push the configurations and policies to the appliances from System Tree.
Generate some traffic that the configured network tap or SPAN can see.
Confirm that incidents are recorded in the DLP Incident Manager.