DOCUMENT LIBRARY
DOCUMENT LIBRARY
Products
Best Practices
Hardware Guides
Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
More >>
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Lacework FortiCNAPP
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
More >>
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
SOC-as-a-Service (SOCaaS)
Identity
FortiAuthenticator
FortiTrust Identity
FortiPAM
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
More >>
Secure Networking
Hybrid Mesh Firewall
FortiGate/ FortiOS
FortiGate-5000
/
6000
/
7000
NOC Management
FortiManager
/
FortiManager Cloud
Managed Fortigate Service
FortiAIOps
LAN
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiEdge Cloud
FortiNAC-F
WAN
Secure SD-WAN
FortiExtender
Communication & Surveillance
FortiVoice
/
FortiVoice Cloud
FortiFone
FortiCamera
FortiRecorder
FortiCentral
Unified SASE
Single Vendor SASE
FortiSASE
Secure SD-WAN
Zero Trust Network Access (ZTNA)
FortiProxy
FortiMonitor
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Cloud Network Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiGate CNF
FortiFlex
Cloud-Native Security
Lacework FortiCNAPP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiADC
FortiDAST
Security Operations
Security Operations Automation
FortiAnalyzer
/
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
Endpoint
FortiClient
/
FortiClient Cloud
FortiEDR/XDR
Data Protection
FortiDLP
FortiDLP Agent
FortiDLP Policies
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken
/
FortiToken Cloud
FortiPAM
Email
FortiMail
FortiPhish
Early Detection & Prevention
FortiSandbox
/
FortiSandbox Cloud
FortiNDR
FortiDeceptor
FortiRecon
Expert Services
SOC-as-a-Service (SOCaaS)
Edge Firewall
FortiGate/FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Overlay-as-a-Service
SD Branch
FortiSwitch
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Application Delivery
FortiADC
/
FortiGSLB
Single Vendor SASE
FortiSASE
Secure Endpoint Connectivity
FortiClient
/
FortiClient Cloud
Secure Private Access
Secure SD-WAN
Zero Trust Network Access (ZTNA)
Thin Edge
FortiGate/ FortiOS
FortiAP / FortiWiFi
FortiExtender
/
FortiExtender Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Application Gateway
FortiGate/ FortiOS
FortiProxy
FortiADC
/
FortiGSLB
Enterprise Asset Management
FortiClient EMS
Endpoint Agent
FortiClient
/
FortiClient Cloud
Agentless Security Posture
FortiNAC-F
FortiSIEM
/
FortiSIEM Cloud
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Wireless
FortiAP / FortiWiFi
FortiAP-U Series
FortiGate Cloud
Switching
FortiSwitch
FortiEdge Cloud
FortiNAC-F
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Privilege Acccess Management
FortiPAM
Next Generation Firewall
FortiGate / FortiOS
FortiGate-5000
/
6000
/
7000
FortiGate Public Cloud
FortiGate Private Cloud
Orchestration & management
FortiManager
/
FortiManager Cloud
FortiAnalyzer
/
FortiAnalyzer Cloud
Expert Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
All
FortiADC Public Cloud
FortiAnalyzer Public Cloud
FortiAuthenticator Public Cloud
FortiDeceptor Public Cloud
FortiGate Public Cloud
FortiIsolator Public Cloud
FortiManager Public Cloud
FortiNDR Public Cloud
FortiPAM Public Cloud
FortiPortal Public Cloud
FortiProxy Public Cloud
FortiSandbox Public Cloud
FortiTester Public Cloud
FortiVoice Public Cloud
FortiWeb Manager Public Cloud
FortiWeb Public Cloud
All
FortiADC Private Cloud
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Private Cloud
FortiAuthenticator Private Cloud
FortiDeceptor Private Cloud
FortiGate Private Cloud
FortiManager Private Cloud
FortiNDR Private Cloud
FortiPAM Private Cloud
FortiProxy Private Cloud
FortiSandbox Private Cloud
FortiTester Private Cloud
FortiVoice Private Cloud
FortiWeb Manager Private Cloud
FortiWeb Private Cloud
Account Management
FortiCloud Services
SAAS Management
FortiGate Cloud
FortiEdge Cloud
FortiEdge Cloud
FortiExtender Cloud
FortiPresence Cloud
FortiToken Cloud
FortiTrust Identity
FortiZTP
FortiCamera Cloud
SAAS Application Security
FortiWeb Cloud
FortiGSLB
FortiCASB
FortiCNP
FortiInsight
FortiPhish
FortiGate CNF
Managed Services
SOC-as-a-Service (SOCaaS)
Managed Fortigate Service
Platform as a service (PAAS)
FortiSASE
FortiAnalyzer Cloud
FortiManager Cloud
FortiClient Cloud
FortiSandbox Cloud
FortiMail Cloud
FortiSOAR Cloud
Other SAAS Services
Overlay-as-a-Service
FortiRecon
FortiConverter
ForiIPAM
FortiFlex
FortiCare Elite
4D Resources
Solution Hubs
Define, design, deploy, demo
4D Pillars
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Curated Links by Solution
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
Next Generation Firewall
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiGate
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Search documents and hardware ...
FortiDLP Administration Guide
Introduction
Terminology
Overview
Configuration checklist
Access
FortiDLP Console
Logging in to the FortiDLP Console
Logging out of the FortiDLP Console
FortiDLP API
Generating FortiDLP API access tokens
Revoking FortiDLP API access tokens
Integrate
SIEM tools
Generating an event stream and access token
Integrating using the FortiDLP Add-on for Splunk
Integrating using the Event Streaming Service API
Event message fields
Webhooks
Creating webhooks
Creating custom webhook templates
Setting up SentinelOne webhooks
Webhook payload fields
Editing webhooks
Deleting webhooks
Incident email notifications
Creating incident notification subscriptions
Editing incident notification subscriptions
Disabling incident notification subscriptions
Deleting incident notification subscriptions
Migrating to incident notifications from SMTP incident email alerts
SMTP (deprecated)
Enabling SMTP email alerts (deprecated)
Editing SMTP email alerts (deprecated)
Deleting SMTP email alerts (deprecated)
Microsoft
Entra ID users
Adding an Entra ID directory configuration
Syncing Entra ID directories
Auto-archiving Entra ID directory-deleted users
Deleting Entra ID directory configurations
Microsoft sensitivity labels
Syncing Microsoft sensitivity labels
Microsoft SharePoint and OneDrive Connector
Enabling the Microsoft SharePoint and OneDrive Connector
Disabling the Microsoft SharePoint and OneDrive Connector
Microsoft credentials
Google
Google Workspace users
Adding a Google Workspace directory configuration
Syncing Google Workspace directories
Auto-archiving Google Workspace directory-deleted users
Deleting Google Workspace directory configurations
Google Drive Connector
Enabling the Google Drive Connector
Disabling the Google Drive Connector
Google credentials
Manage
Operators
Operator accounts
Internal operators
Creating internal operator accounts
Editing internal operator accounts
Deleting internal operator accounts
Resetting internal operator account passphrases
Configuring multi-factor authentication for your internal operator account
SAML operators
Setting X.509 certificates
Configuring SAML with Google
Configuring SAML with Entra ID
Configuring SAML with Okta
Configuring SAML with OneLogin
Configuring SAML with ADFS
Configuring IdP metadata and attributes
Enabling SAML configurations
Disabling SAML configurations
Deleting SAML configurations
FortiDLP supporting operators
Approving or denying FortiDLP supporting operator access
Revoking FortiDLP supporting operator access
Operator roles
Creating operator roles
Duplicating operator roles
Editing operator roles
Deleting operator roles
Operator web sessions
Viewing operator web sessions
Terminating operator web sessions
Viewing your latest logins
Operator Audit logs
Viewing operator Audit logs
Users
User-event mapping
Configure
Behavioral analytics detection rules
Configuring behavioral analytics detection rules
Labels
Creating custom labels
Assigning custom labels
Editing labels
Flagging labels
Unassigning labels
Deleting labels
Policies
Importing policy templates
Creating custom policy groups
Configuring policy templates
Using predefined policy groups
Duplicating policies
Moving policies
Disabling policies
Deleting policies
Publishing policy groups
Editing policy groups
Duplicating policy groups
Exporting and importing policy groups
Disabling policy groups
Deleting policy groups
Viewing configured policies
Assets
Viewing assets
Creating custom assets
Editing custom assets
Deleting custom assets
Customizing editable OOB assets
Duplicating assets
Agent offline warning
Configuring the Agent offline warning
Agent configuration groups
Creating Agent configuration groups
Agent configuration default settings
Duplicating Agent configuration groups
Editing Agent configuration groups
Deleting Agent configuration groups
Testing Agent configurations
Node archiving
Manually archiving and unarchiving nodes
User archiving and deleting
Auto-archiving inactive users
Preventing auto-archiving of users
Manually archiving and unarchiving users
Deleting users
User state transitions
File shadowing
Downloading the FortiDLP Decryption Tool
Configuring file shadowing with MinIO
Configuring file shadowing with AWS
Configuring file shadowing with GCS
Configuring file shadowing with Azure Blob Storage
Configuring file shadowing with FortiDLP
Testing file shadowing configurations
Setting encryption keys
Rotating encryption keys
Deleting encryption keys
Enabling policies with file shadowing
Decrypting shadow copies
Changing your encryption key passphrase
Login banner message
Enabling a login banner message
Disabling a login banner message
Diagnose
Audit log
Viewing the Audit log
Exporting the Audit log
Agent performance reports
Viewing FortiDLP Agent performance reports
Agent debug bundles
Viewing FortiDLP Agent debug bundles
Crash reports
Viewing FortiDLP Agent crash reports
Deleting FortiDLP Agent crash reports
Home
FortiDLP
FortiDLP Administration Guide
Deleting webhooks
Deleting webhooks
To delete a webhook, follow these steps.
How to delete a webhook
In the
FortiDLP Console
, on the left-hand sidebar, click
.
Under Integrations, select the
Webhooks
tab.
In the
Webhooks
table, at the end of the relevant webhook's row, click
>
Delete
.
This cannot be undone.
Previous
Next
Deleting webhooks
Deleting webhooks
To delete a webhook, follow these steps.
How to delete a webhook
In the
FortiDLP Console
, on the left-hand sidebar, click
.
Under Integrations, select the
Webhooks
tab.
In the
Webhooks
table, at the end of the relevant webhook's row, click
>
Delete
.
This cannot be undone.
Previous
Next
Home
Product Pillars
Network Security
Network Security
FortiGate / FortiOS
FortiGate 5000
FortiGate 6000
FortiGate 7000
FortiProxy
NOC & SOC Management
FortiManager
FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiMonitor
FortiGate Cloud
Enterprise Networking
Secure SD-WAN
FortiLAN Cloud
FortiSwitch
FortiAP / FortiWiFi
FortiAP-U Series
FortiNAC-F
FortiExtender
FortiExtender Cloud
FortiAIOps
Business Communications
FortiFone
FortiVoice
FortiVoice Cloud
FortiRecorder
FortiCamera
Zero Trust Access
ZTNA
Zero Trust Network Access
FortiClient EMS
SASE
FortiSASE
Identity
FortiAuthenticator
FortiTrust Identity
FortiToken Cloud
FortiToken
Cloud Security
Hybrid Cloud Security
FortiGate Public Cloud
FortiGate Private Cloud
FortiFlex
Cloud Native Protection
FortiCNP
FortiDevSec
Web Application / API Protection
FortiWeb
FortiWeb Cloud
FortiADC
FortiGSLB
FortiGuard ABP
SAAS Security
FortiMail
FortiMail Cloud
FortiCASB
Security Operations
SOC Platform
FortiAnalyzer
FortiAnalyzer Cloud
FortiSIEM
/
FortiSIEM Cloud
FortiSOAR
FortiPhish
Advanced Threat Protection
FortiSandbox
FortiSandbox Cloud
FortiNDR
FortiNDR Cloud
FortiDeceptor
FortiInsight
FortiInsight Cloud
FortiIsolator
Endpoint Security
FortiClient
FortiClient Cloud
FortiEDR
Best Practices
Solution Hubs
Cloud
FortiCloud
Public & Private Cloud
Popular Solutions
Secure SD-WAN
Zero Trust Network Access
Secure Access
Next Generation Firewall
Security Fabric
Tele-Working
Multi-Factor Authentication
FortiASIC
Operational Technology
MSSP
4-D Resources
Secure SD-WAN
Zero Trust Network Access
Wireless
Switching
Secure Access Service Edge
Identity and Access Management
Next Generation Firewall
Hardware Guides
FortiAnalyzer
FortiAnalyzer Big-Data
FortiADC
FortiAP / FortiWiFi
FortiAP U-Series
FortiAuthenticator
FortiCache
FortiCarrier
FortiController
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiExtender
FortiGate
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiHypervisor
FortiIsolator
FortiMail
FortiManager
FortiNAC
FortiNDR
FortiProxy
FortiRecorder
FortiRPS
FortiSandbox
FortiSIEM
FortiSwitch
FortiTester
FortiToken
FortiVoice
FortiWAN
FortiWeb
FortiWLC
FortiWLM
Product A-Z
AscenLink
AV Engine
AWS Firewall Rules
Container FortiOS
FortiADC
FortiADC E Series
FortiADC Manager
FortiADC Private Cloud
FortiADC Public Cloud
FortiAIOps
FortiAnalyzer
FortiAnalyzer BigData
FortiAnalyzer BigData Private Cloud
FortiAnalyzer Cloud
FortiAnalyzer Private Cloud
FortiAnalyzer Public Cloud
FortiAP / FortiWiFi
FortiAP-U Series
FortiAuthenticator
FortiAuthenticator Private Cloud
FortiAuthenticator Public Cloud
FortiAuthProxy
FortiBalancer
FortiBranchSASE
FortiBridge
FortiCache
FortiCamera
FortiCamera Cloud
FortiCare Elite
FortiCarrier
FortiCASB
FortiCentral
FortiClient
FortiClient Cloud
FortiCloud Services
FortiCNP
FortiConnect
FortiController
FortiConverter Service
FortiConverter Tool
FortiCore
FortiCSPM
FortiCWP
FortiDAST
FortiDB
FortiDDoS
FortiDDoS-F
FortiDeceptor
FortiDeceptor DaaS
FortiDeceptor Private Cloud
FortiDeceptor Public Cloud
FortiDevSec
FortiDLP
FortiDLP Agent
FortiDLP Policies
FortiDNS
FortiEdge Cloud
FortiEDR/XDR
FortiEndpoint
FortiExplorer
FortiExplorer Go
FortiExtender
FortiFlex
FortiFone
FortiGate / FortiOS
FortiGate Cloud
FortiGate CNF
FortiGate Private Cloud
FortiGate Public Cloud
FortiGate-5000
FortiGate-6000
FortiGate-7000
FortiGate-as-a-Service
FortiGSLB
FortiGuard Advanced Bot Protection
FortiGuest
FortiHypervisor
FortiInsight
FortiInsight Cloud
FortiIPAM
FortiIsolator
FortiIsolator Public Cloud
FortiLAN Cloud
FortiMail
FortiMail Cloud
FortiManager
FortiManager Cloud
FortiManager Private Cloud
FortiManager Public Cloud
FortiMonitor
FortiNAC
FortiNAC-F
FortiNDR
FortiNDR (on-premise) Private Cloud
FortiNDR (on-premise) Public Cloud
FortiNDR Cloud
FortiNDR Cloud Sensors
FortiPAM
FortiPAM Private Cloud
FortiPAM Public Cloud
FortiPhish
FortiPlanner
FortiPolicy
FortiPortal
FortiPortal Public Cloud
FortiPresence
FortiPresence VM
FortiProxy
FortiProxy Private Cloud
FortiProxy Public Cloud
FortiRecon
FortiRecorder
FortiRPS
FortiSandbox
FortiSandbox Cloud
FortiSandbox Private Cloud
FortiSandbox Public Cloud
FortiSASE
FortiScanner
FortiSIEM
FortiSIEM Cloud
FortiSOAR
FortiSOAR Cloud
FortiSRA
FortiSwitch
FortiSwitch Manager
FortiTap
FortiTester
FortiTester Private Cloud
FortiTester Public Cloud
FortiToken
FortiToken Cloud
FortiTrust Identity
FortiVoice
FortiVoice Cloud
FortiVoice Private Cloud
FortiVoice Public Cloud
FortiWAN
FortiWAN Controller
FortiWeb
FortiWeb Cloud
FortiWeb Manager Private Cloud
FortiWeb Manager Public Cloud
FortiWeb Private Cloud
FortiWeb Public Cloud
FortiWLM
FortiZTP
IPS Engine
Lacework FortiCNAPP
Managed FortiGate Service
Overlay-as-a-Service
Security Awareness and Training
SOCaaS
Wireless Controller
Ordering Guides
Download PDF
Table of Contents
Introduction
Terminology
Overview
Configuration checklist
Access
FortiDLP Console
Logging in to the FortiDLP Console
Logging out of the FortiDLP Console
FortiDLP API
Generating FortiDLP API access tokens
Revoking FortiDLP API access tokens
Integrate
SIEM tools
Generating an event stream and access token
Integrating using the FortiDLP Add-on for Splunk
Integrating using the Event Streaming Service API
Event message fields
Webhooks
Creating webhooks
Creating custom webhook templates
Setting up SentinelOne webhooks
Webhook payload fields
Editing webhooks
Deleting webhooks
Incident email notifications
Creating incident notification subscriptions
Editing incident notification subscriptions
Disabling incident notification subscriptions
Deleting incident notification subscriptions
Migrating to incident notifications from SMTP incident email alerts
SMTP (deprecated)
Enabling SMTP email alerts (deprecated)
Editing SMTP email alerts (deprecated)
Deleting SMTP email alerts (deprecated)
Microsoft
Entra ID users
Adding an Entra ID directory configuration
Syncing Entra ID directories
Auto-archiving Entra ID directory-deleted users
Deleting Entra ID directory configurations
Microsoft sensitivity labels
Syncing Microsoft sensitivity labels
Microsoft SharePoint and OneDrive Connector
Enabling the Microsoft SharePoint and OneDrive Connector
Disabling the Microsoft SharePoint and OneDrive Connector
Microsoft credentials
Google
Google Workspace users
Adding a Google Workspace directory configuration
Syncing Google Workspace directories
Auto-archiving Google Workspace directory-deleted users
Deleting Google Workspace directory configurations
Google Drive Connector
Enabling the Google Drive Connector
Disabling the Google Drive Connector
Google credentials
Manage
Operators
Operator accounts
Internal operators
Creating internal operator accounts
Editing internal operator accounts
Deleting internal operator accounts
Resetting internal operator account passphrases
Configuring multi-factor authentication for your internal operator account
SAML operators
Setting X.509 certificates
Configuring SAML with Google
Configuring SAML with Entra ID
Configuring SAML with Okta
Configuring SAML with OneLogin
Configuring SAML with ADFS
Configuring IdP metadata and attributes
Enabling SAML configurations
Disabling SAML configurations
Deleting SAML configurations
FortiDLP supporting operators
Approving or denying FortiDLP supporting operator access
Revoking FortiDLP supporting operator access
Operator roles
Creating operator roles
Duplicating operator roles
Editing operator roles
Deleting operator roles
Operator web sessions
Viewing operator web sessions
Terminating operator web sessions
Viewing your latest logins
Operator Audit logs
Viewing operator Audit logs
Users
User-event mapping
Configure
Behavioral analytics detection rules
Configuring behavioral analytics detection rules
Labels
Creating custom labels
Assigning custom labels
Editing labels
Flagging labels
Unassigning labels
Deleting labels
Policies
Importing policy templates
Creating custom policy groups
Configuring policy templates
Using predefined policy groups
Duplicating policies
Moving policies
Disabling policies
Deleting policies
Publishing policy groups
Editing policy groups
Duplicating policy groups
Exporting and importing policy groups
Disabling policy groups
Deleting policy groups
Viewing configured policies
Assets
Viewing assets
Creating custom assets
Editing custom assets
Deleting custom assets
Customizing editable OOB assets
Duplicating assets
Agent offline warning
Configuring the Agent offline warning
Agent configuration groups
Creating Agent configuration groups
Agent configuration default settings
Duplicating Agent configuration groups
Editing Agent configuration groups
Deleting Agent configuration groups
Testing Agent configurations
Node archiving
Manually archiving and unarchiving nodes
User archiving and deleting
Auto-archiving inactive users
Preventing auto-archiving of users
Manually archiving and unarchiving users
Deleting users
User state transitions
File shadowing
Downloading the FortiDLP Decryption Tool
Configuring file shadowing with MinIO
Configuring file shadowing with AWS
Configuring file shadowing with GCS
Configuring file shadowing with Azure Blob Storage
Configuring file shadowing with FortiDLP
Testing file shadowing configurations
Setting encryption keys
Rotating encryption keys
Deleting encryption keys
Enabling policies with file shadowing
Decrypting shadow copies
Changing your encryption key passphrase
Login banner message
Enabling a login banner message
Disabling a login banner message
Diagnose
Audit log
Viewing the Audit log
Exporting the Audit log
Agent performance reports
Viewing FortiDLP Agent performance reports
Agent debug bundles
Viewing FortiDLP Agent debug bundles
Crash reports
Viewing FortiDLP Agent crash reports
Deleting FortiDLP Agent crash reports