DLP GUI option gone in 6.2.2

[ianmclachlan]

Hi Guys,

Have noticed that the GUI DLP configuration page is missing from 6.2.2.  I can, of course use the CLI, however, I'm lazy and prefer point and click.  Does anyone know if it's buried deep in the system somewhere?

Thanks

[tioeudes]

Don't you have to enable the feature under Feature Visibility?

[ianmclachlan]

You had to in ver 5, but now there is no feature to enable.

[Dave_Hall]

The GUI options seem to have been removed completely in that version . 

[ianmclachlan]

:( Just as I'd feared.  I've discovered it's not working either.

[blntplt42]

Same problem. I asked distributor company in our country. They said "We have removed this feature in this release. It won't come any more. If you want dlp then you management dlp policy with gui"

Then I downgrade old firmware. This is unacceptable. I am thinking replace other brand firewall .

 

[nbctcp]

Yes, I notice.

I can create dlp filter and sensor in CLI but I can't put in policy No "set dlp-sensor" anymore

FortiOS Cookbook 6.2.3 still mention DLP GUI on page 856, which is incorrect

The cookbook mention to use Web Filter instead of DLP

But on Web Filter

1. I can't add more extension such as .scr

2. I can't scan if target server using https or sftp

How to overcome those problems

tq

[mcdaniels]

Hi folks,

I just realized, that all my DLP-Profiles are missing on my FG-60F @ OS 6.2.3 and -of course- just red the nice sentence "DLP Gui was removed".

so, now I had no of my old DLP profiles, which is a real problem. I used DLP the other way. I blocked certain filetypes from downloading.

Why Fortinet has removed this feature. I cannot see the point.

Very disappointing!!!

In my opinion this has a massive impact to security!

[BGMIndustries]

Just came here to say I've just upgraded our new machines, which are going to replace a single FTG, to 6.2.3 and also realized there is no DLP Option from GUI anymore. I wouldn't mind re-creating all polices as Web Filter / E-Mail-Filter, but those filters lack the options to define my own patterns, I can only use the inbuilt onces. This is such a step backwards in security and I have no understanding why Fortinet is going backwards here. DLP was one of my most-used filters as it easily enabled me to control filetypes by patterns. Really disappointing.

[oxfordwhite84 · Accepted solution]

I just opened a case regarding this.

 You can apply it to a policy if you:

[ol]

create a policy[ol]

You need to have the mode/type set to proxy[/ol]

In CLI edit the policy

set utm-status enable

NOW you can set the dlp-sensor[/ol]

Hope that helps folks.