Enterprise DLP
Request an End User Coaching Exemption
Table of Contents
Expand All
|
Collapse All
Enterprise DLP Docs
Request an End User Coaching Exemption
Request an exemption for traffic that generated an Alert or Block DLP incident using
End User Coaching.
Your security administrator must configure the End User Coaching notification
template to allow exemption requests for traffic that generated an Alert or Block
DLP incident.
The end user who generated the DLP incident must request the exemption from the
endpoint that generated the incident.
- On the endpoint, open Access Experience User Interface.Navigate to the Data Security notification you want to submit an exemption for.A Data Security notification with a red incident status means the notification is pending and requires the end user's review. The incident status remains red until the end user submits an exemption request or feedback.Check (enable) Request an exemption and enter the business justification or reason for why your data security administrator should grant the exemption.The request to provide feedback depends on how your data security administrator configured the End User Coaching notification template. For auditing purposes, Palo Alto Networks recommends end users provide a business justification or reason for all exemption requests.Submit the exemption request.
The incident status for the Data Security notification turns to orange after submitting the exemption request. Wait for your data security administrator to review your pending exemption request.
Return to the Access Experience User Interface to review your exemption request status. The data security incident status turns to green after your data security administrator grants or denies your exemption request.If your data security administrator granted the exemption request, the exemption expiration timestamp (date and time) displays for the data security incident. You can now reattempt the activity that generated the DLP incident that was granted an exemption.