Monitor DLP Activity

Applies To: Locally-managed Fireboxes

Data Loss Prevention (DLP) is end-of-life as of 26 February 2025. For Fireboxes that run Fireware v12.11.3, WSM and Fireware Web UI no longer include DLP configuration settings in the user interface. For Fireboxes that run Fireware v12.11.2 or lower, DLP is required by the configuration schema but is no longer functional if your DLP license is expired. For more information, go to this Product and Support News Blog post.

You can monitor DLP activity on the Subscription Services dashboard.

  1. Select DASHBOARD > Subscription Services.
  2. Scroll down to the Data Loss Prevention section.

The Subscription Services dashboard shows:

  • Scans performed
  • Violations Detected
  • Quarantined Objects
  • Blocked Objects
  • Signature update status

For more information, go to Subscription Services.

Use Firebox System Manager and the WatchGuard Report Server to monitor DLP violations and other DLP statistics.

In Firebox System Manager, the Subscription Services tab shows current WatchGuard device statistics about Data Loss Prevention activity that occurred after the last device restart. The DLP statistics available in Firebox System Manager are:

  • Scans performed
  • Violations detected
  • Quarantined objects
  • Blocked objects
  • Signature update status

For more information, go to Subscription Services Statistics (Subscription Services).

If you have installed a WatchGuard Report Server, you can generate Data Loss Prevention reports, which show more detailed information about DLP violations and other DLP activity. For more information about available reports, go to Predefined Reports List

Related Topics

About Data Loss Prevention