--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # Symantec Integration for Data Loss Prevention Incident Response # Symantec Integration for Data Loss Prevention Incident Response {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read The Symantec DLP integration supports the ingestion of Data Loss Prevention Incident Response incidents created on the Symantec Data Loss Prevention Incident Response deployment. After ingestion, you can use the incident management functionalities to remediate the DLP incidents. ## Request apps on the Store {#symantec-dlp-integration__section_tj2_wdd_zrb} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#symantec-dlp-integration__inline-send-to-store} ## Overview and key features {#symantec-dlp-integration__section_jzc_w2d_zrb} The Symantec DLP integration helps companies to track the usage and movement of sensitive data on various platforms. This integration includes the following key features: * Ability to create multiple integration profiles for different Symantec API endpoints. * Scheduled ingestion of DLP incidents from Symantec into your ServiceNow instance. * Ability to apply API filters to retrieve the incidents that match the filter criteria and also specify the filter for Symantec DLP incidents that are required to be imported. * Mapping the DLP incident states in your ServiceNow instance to DLP incident states in Symantec. * Automatically update incident status in Symantec when the state changes in your ServiceNow instance. * Ability to customize and define the severity mapping between Symantec DLP incidents with ServiceNow incidents. {#symantec-dlp-integration__ul_yjp_fgd_zrb} To learn more about the integration, see the [Symantec product documentation](https://techdocs.broadcom.com). * **[Getting started with Symantec DLP integration for Data Loss Prevention](https://servicenow-prod.fluidtopics.net/JBbbOpoKiKZ7Qjg8aJxmDQ)** Before you can use the integration, you must download it from the ServiceNow® Store. * **[Install and configure the Symantec DLP integration for Data Loss Prevention](https://servicenow-prod.fluidtopics.net/txaLJORVFWrVWOSP_rfTrg)** Install and configure the  Symantec DLP integration from the  ServiceNow® Store on your  ServiceNow AI Platform instance. Start investigating DLP incidents using the  Symantec DLP incident data. * **[Create a profile for Symantec DLP integration](https://servicenow-prod.fluidtopics.net/JTKkUW2Dz6EkJE17NvDiMA)** Create an incident profile in your  ServiceNow AI Platform instance. Determine the  Symantec DLP incidents that are suitable for creating DLP incidents. * **[Severity mapping between Symantec DLP incidents with ServiceNow incidents](https://servicenow-prod.fluidtopics.net/nNYjZ8XeY3D7ZNffc2uPrw)** Use the severity mapping feature to configure and synchronize the mapping between Symantec incidents and ServiceNow AI Platform® incidents. * **[Configure Smart Response Rules](https://servicenow-prod.fluidtopics.net/zed_b98V45sMEuKDlkkvWA)** Configure the Symantec smart response rule(s) to perform response actions on the ingested Symantec DLP Incidents. * **[Execute Smart Response Rules](https://servicenow-prod.fluidtopics.net/ZIYNIr0gXIZMkrJrrGMycw)** Use this feature to execute Smart Response Rules for the Symantec DLP incidents. * **[Configure the Symantec DLP  integration settings](https://servicenow-prod.fluidtopics.net/EBrWM8jgS3YYxmlac_fcjg)** Modify the  Symantec DLP  integration default system properties. * **[Domain Separation in the Symantec DLP integration](https://servicenow-prod.fluidtopics.net/XzYGnVDt~9KoZbg36U4Thw)** Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can then control several aspects of this separation, including which users can see and access data. **Related concepts** * [Data Loss Prevention Incident Response Integration with Proofpoint](https://servicenow-prod.fluidtopics.net/YSvFcY7BZLaivQVVmfcN7w "The Proofpoint DLP integration supports the ingestion of Data Loss Prevention incidents created on the Proofpoint Data Loss Prevention deployment. After ingestion, you can use the incident management functionalities to remediate the DLP incidents.") * [Data Loss Prevention Incident Response Integration with Netskope](https://servicenow-prod.fluidtopics.net/X0VZV3Zk0gDqNvuc2nm6FA "The Netskope DLP integration supports the ingestion of Data Loss Prevention incidents created on the Netskope Data Loss Prevention deployment. Netskope DLP helps companies to track the usage and movement of sensitive data on various platforms.") * [Internet Content Adaption Protocol (ICAP) integration for DLP IR](https://servicenow-prod.fluidtopics.net/lZ4ZwkNgZ22tGC1XWaJGlQ "The Internet Content Adaption Protocol (ICAP) DLP integration supports the ingestion of Data Loss Prevention Incident Response alerts, allows the fetching of match content, and evidence files from Amazon S3 created on the ICAP supported Data Loss Prevention Incident Response deployment.") * [Data Loss Prevention Incident Response with Microsoft](https://servicenow-prod.fluidtopics.net/MGNPNajD4H9ReQz~6_j1LQ "The Data Loss Prevention Incident Response with Microsoft provides a core framework to import Data Loss Prevention (DLP) incidents from multiple sources, such as Microsoft Purview apps, Microsoft Teams, Exchange Online, SharePoint Online, OneDrive for Business, and other event types.")