{"id":5233,"date":"2022-02-01T14:58:23","date_gmt":"2022-02-01T11:58:23","guid":{"rendered":"https:\/\/www.endpointprotector.com\/blog\/?p=5233"},"modified":"2022-02-01T17:53:12","modified_gmt":"2022-02-01T14:53:12","slug":"configuring-user-remediation-settings","status":"publish","type":"post","link":"https:\/\/www.endpointprotector.com\/blog\/configuring-user-remediation-settings\/","title":{"rendered":"Configuring User Remediation Settings"},"content":{"rendered":"<div class=\"preformatted-content\">\n<p>TL;DR<\/p>\n<ul>\n<li aria-level=\"1\">The User Remediation feature allows employees to bypass a policy restriction. Rather than following an \u2018ask for permission\u2019 model, this feature allows for an \u2018ask for forgiveness\u2019 approach.<\/li>\n<li aria-level=\"1\">User Remediation reduces your admin team&#8217;s time responding to tickets and requests to bypass a policy restriction.<\/li>\n<li aria-level=\"1\">All events related to this feature will be logged, even if the user cancels the action, and admins can see it in the Reports and Analysis section.<\/li>\n<li aria-level=\"1\">The User Remediation pop-up can be customized and branded.<\/li>\n<li aria-level=\"1\">The feature is available on the Content Aware Protection module and is a Premium feature.<\/li>\n<\/ul>\n<\/div>\n<p>User Remediation is an optional feature that can be applied to your <a href=\"https:\/\/www.endpointprotector.com\/solutions\/content-aware-data-loss-prevention\" target=\"_blank\" rel=\"noopener\">Content Aware Protection<\/a> policies. It is designed to allow for a bypass when an employee attempts to transmit sensitive information.<\/p>\n<p>Instead of having a block message displayed to that employee (which would require further Administrative intervention), \u2018User Remediation\u2019 gives the ability for employees to transmit information that may be necessary for their role, function, or duty.\u00a0 Rather than following an \u2018ask for permission\u2019 model, this feature allows for an \u2018ask for forgiveness\u2019 approach.\u00a0 While this bypass can allow for more timely content delivery, justification details can be requested, which are then transmitted to an Administrator so that further scrutiny and due diligence may occur.<\/p>\n<h3>Here\u2019s a simple scenario:<\/h3>\n<p>Helen is from the accounts payable department, and she needs to print the boarding pass for her business trip. The pass is blocked due to her passport number, and it\u2019s late Friday evening. She submits a user remediation request with the business trip justification and is able to print the boarding pass without intervention by the Administrator.<\/p>\n<p>This Academy Guide walks through the basic set-up and employee experience.<\/p>\n<p><strong>Note<\/strong> &#8211; User Remediation is a premium feature.\u00a0 As such, this section is only available if Premium licenses are present on the Endpoint Protector Server.<\/p>\n<h2>Implementing User Remediation<\/h2>\n<p>You can enable User Remediation on any existing Content Aware Protection policy. To turn on User Remediation, navigate to the Content Aware Protection Policy(s) where the restriction is intended and choose to edit the \u2018Policy Action:\u2019 field.\u00a0 By selecting \u2018Block and Remediate,\u2019 the User Remediation feature will be enabled the next time the endpoint connects to the Endpoint Protector Server.<\/p>\n<p><a href=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-5238 size-medium\" src=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-560x159.png\" alt=\"\" width=\"560\" height=\"159\" srcset=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-560x159.png 560w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-1024x290.png 1024w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-768x217.png 768w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-1536x435.png 1536w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-2048x580.png 2048w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/BlockAndRemediate-1568x444.png 1568w\" sizes=\"auto, (max-width: 560px) 100vw, 560px\" \/><\/a><\/p>\n<p><em>Click the image for full resolution.<\/em><\/p>\n<h2>User Remediation variables<\/h2>\n<p>Under System Parameters &gt; \u2018User Remediation,\u2019 variables for this feature can be seen within the Endpoint Protector dashboard.\u00a0 Variables include, but are not limited to: adding a custom logo and URL to the pop-up that appears on the employee\u2019s screen and the time interval allowed for each user remediation request (for example, if a user attempts to send out a document containing PII via an email attachment, an authorized action would allow a defined amount of minutes for that item to be sent via email after the action is selected).<\/p>\n<p>See the following image for a sample \u2018User Remediation\u2019 Pop-up message.<\/p>\n<p><a href=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/UserRemediationPopup.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-5260 size-medium\" src=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/UserRemediationPopup-560x306.png\" alt=\"\" width=\"560\" height=\"306\" srcset=\"https:\/\/static.endpointprotector.com\/blog\/2022\/02\/UserRemediationPopup-560x306.png 560w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/UserRemediationPopup-768x420.png 768w, https:\/\/static.endpointprotector.com\/blog\/2022\/02\/UserRemediationPopup.png 785w\" sizes=\"auto, (max-width: 560px) 100vw, 560px\" \/><\/a><\/p>\n<p><em>Click the image for full resolution.<\/em><\/p>\n<h2>User Remediation Reporting<\/h2>\n<p>Logs (or details) of an end user\u2019s response to a User Remediation intervention can be found in the Endpoint Protector dashboard under Reports and Analysis &gt; \u2018Content Aware Report.\u2019\u00a0 If User Remediation has been utilized to authorize a bypass and transmit of sensitive content, the Justification field will provide any user-submitted messaging.<\/p>\n<h2>User Remediation vs. Offline Offline Temporary Password<\/h2>\n<p>There may be some scenarios where User Remediation is not a viable option.<\/p>\n<p>In such cases, \u201cOffline Temporary Passwords\u201d (OTP) offers another means to bypassing a policy.<\/p>\n<p>The Offline Temporary Password can be generated for the below entities:<\/p>\n<ul>\n<li>Device (a specific device)<\/li>\n<li>Computer and User (all devices)<\/li>\n<li>Computer and User (all file transfers)<\/li>\n<\/ul>\n<p>A password is linked to a time period and is unique for a certain device and computer. The time intervals available are 15 minutes, 30 minutes, 1 hour, 2 hours, 4 hours, 8 hours, 1 day, 2 days, 5 days, 14 days, and 30 days or Custom. This means the same password cannot be used for different devices or computers.\u00a0 It also cannot be used twice (except in the case of Universal Offline Temporary Passwords).<\/p>\n<p>Generating Offline Temporary Passwords can only be carried out by Administrators with \u201cSuper Administrator\u201d permissions. When generating an Offline Temporary Password for a Device, the administrator can either introduce the Device Code communicated by the user or search the Endpoint Protector database for an existing device.<\/p>\n<p>Once an OTP has been generated, the Administrator will need to send it to the user.<\/p>\n<h2>Need help?<\/h2>\n<p>If you\u2019d like further information and guidance on User Remediation options (or to enable it on your account), please reach out to your Customer Success Manager or get in touch with our support team here <a href=\"https:\/\/support.endpointprotector.com\/hc\/en-us\/requests\/new\" target=\"_blank\" rel=\"noopener\">https:\/\/support.endpointprotector.com\/hc\/en-us\/requests\/new<\/a>.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>TL;DR The User Remediation feature allows employees to bypass a policy restriction. Rather than following an \u2018ask for permission\u2019 model, this feature allows for an \u2018ask for forgiveness\u2019 approach. User Remediation reduces your admin team&#8217;s time responding to tickets and requests to bypass a policy restriction. All events related to this feature will be logged, &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.endpointprotector.com\/blog\/configuring-user-remediation-settings\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Configuring User Remediation Settings&#8221;<\/span><\/a><\/p>\n","protected":false},"author":8,"featured_media":5241,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2,1],"tags":[],"class_list":["post-5233","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-content-aware-protection","category-data-loss-prevention","entry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/5233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/comments?post=5233"}],"version-history":[{"count":7,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/5233\/revisions"}],"predecessor-version":[{"id":5262,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/5233\/revisions\/5262"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media\/5241"}],"wp:attachment":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media?parent=5233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/categories?post=5233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/tags?post=5233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}