Follow these steps to enable data exfiltration detection.
Prerequisites
Admin access to the SmartVision appliance.
To enable data exfiltration detection:
Log in to the appliance CLI and go to configuration mode:
hostname > enable
hostname # configure terminal
Enable data exfiltration detection on the appliance.
hostname (config) # smartvision exfil enable
Verify your configuration change.
hostname (config) # show smartvision status
SmartVision State
Detection : yes
Context Service : running
Data exfil detection state : running
.
.
.
hostname (config) # show smartvision config
SmartVision Config
Detection Enabled : yes
Context Service enabled : yes
Data exfil detection enabled : no
Beaconing detection enabled : no
TLS detection enabled : no
Base version : 2
Rule version : 3
.
.
.
Network Security (NX) > Network Security SmartVision Feature Guide > Configuring > Enabling and configuring data exfiltration detection > Configuring data exfiltration detection using the Web UI