Watchlists

The Watchlists module eases monitoring of users and managed nodes that are of particular interest—for example, because they will soon be leaving the organization. The entities that appear here are assigned flagged labels. For more information, refer to the FortiDLP Administration Guide.

From here, you can view and create watchlists for flagged labels to monitor associated entities more carefully.

A flagged label called "Leavers" could be used to highlight departing employees, who may pose a threat to company data, within a watchlist. These employees would also be prominently displayed in policy reports and be shown with a icon in the Users module.

Each flagged label is displayed in a panel along with any associated entities. On the top-right corner of each panel, you can quickly navigate to the label's detection report or perform a search for the label. And for any matching entity, you can jump to the Activity feed. For more on this, see Viewing watchlists.