Symantec Integration for Data Loss Prevention Incident Response

The Symantec DLP integration supports the ingestion of Data Loss Prevention Incident Response incidents created on the Symantec Data Loss Prevention Incident Response deployment. After ingestion, you can use the incident management functionalities to remediate the DLP incidents.

Request apps on the Store

Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Overview and key features

The Symantec DLP integration helps companies to track the usage and movement of sensitive data on various platforms.

This integration includes the following key features:

• Ability to create multiple integration profiles for different Symantec API endpoints.
• Scheduled ingestion of DLP incidents from Symantec into your ServiceNow instance.
• Ability to apply API filters to retrieve the incidents that match the filter criteria and also specify the filter for Symantec DLP incidents that are required to be imported.
• Mapping the DLP incident states in your ServiceNow instance to DLP incident states in Symantec.
• Automatically update incident status in Symantec when the state changes in your ServiceNow instance.
• Ability to customize and define the severity mapping between Symantec DLP incidents with ServiceNow incidents.

To learn more about the integration, see the Symantec product documentation.

• Getting started with Symantec DLP integration for Data Loss Prevention
  Before you can use the integration, you must download it from the ServiceNow® Store.
• Install and configure the Symantec DLP integration for Data Loss Prevention
  Install and configure the  Symantec DLP integration from the  ServiceNow® Store on your  ServiceNow AI Platform instance. Start investigating DLP incidents using the  Symantec DLP incident data.
• Create a profile for Symantec DLP integration
  Create an incident profile in your  ServiceNow AI Platform instance. Determine the  Symantec DLP incidents that are suitable for creating DLP incidents.
• Severity mapping between Symantec DLP incidents with ServiceNow incidents
  Use the severity mapping feature to configure and synchronize the mapping between Symantec incidents and ServiceNow AI Platform® incidents.
• Configure Smart Response Rules
  Configure the Symantec smart response rule(s) to perform response actions on the ingested Symantec DLP Incidents.
• Execute Smart Response Rules
  Use this feature to execute Smart Response Rules for the Symantec DLP incidents.
• Configure the Symantec DLP  integration settings
  Modify the  Symantec DLP  integration default system properties.
• Domain Separation in the Symantec DLP integration
  Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can then control several aspects of this separation, including which users can see and access data.

Parent Topic:DLP integrations

Related topics

Data Loss Prevention Incident Response Integration with Proofpoint

Data Loss Prevention Incident Response Integration with Netskope

Internet Content Adaption Protocol (ICAP) integration for DLP IR

Data Loss Prevention Incident Response with Microsoft