User Risk Scoring

Zero Trust
1

Related to

I don’t know / other

What is the issue you’re encountering

User Risk Scoring

What steps have you taken to resolve the issue?

In order to understand how Cloudflare scores the risk of users’ action, I conducted the followings;

  1. Enable “High Number of DLP Policies Triggered” with high for the risk level (Zero Trust>Risk behaviors)
  2. Create DLP profiles (Zero Trust>DLP profiles)
  3. Create HTTP block policy using DLP profile
  4. Conduct the action that is blocked by HTTP policy (repeated this 10 times)
  5. Check HTTP Logs and confirm that my action is blocked by HTTP policy.

I assume that my action will trigger “High number of DLP policies” and list my username n the “User risk scoring”, yet it seems that my username is not shown up in the “User risk scoring” even after 1 day that I trigger DLP policies. Are there any specific criteria to be listed in the “User risk scoring” or is the way I try to trigger “High number of DLP policies” wrong?