Data Loss Prevention

 View Only
  • 1.  DLP endpoint prevent

    Posted Jan 16, 2013 05:53 AM
      |   view attached

    Hi! Why i can not work properly indexed documents Detection tab and the right to ban them up in Response?May be need some component to work with digital prints?



  • 2.  RE: DLP endpoint prevent
    Best Answer

    Broadcom Employee
    Posted Jan 16, 2013 08:26 AM

    Hi, HolyRoyal,

    The IDM policy cannot be implement to DLP Agent to trigger block action.

    The document content of the file that you copy to USB will be send to the Endpoint Server for IDM policy detection. That's mean, is you copy a file inside your IDM sources to USB, the incident will be generated in Endpoint Server and be written to DLP enforce, but, the block action of your response rule will not work.



  • 3.  RE: DLP endpoint prevent

    Broadcom Employee
    Posted Jan 16, 2013 09:07 AM

    you will see the incident however the action is not blocked.



  • 4.  RE: DLP endpoint prevent

    Posted Jan 21, 2013 02:33 AM

    thx,whats about digital prints, need some components to work with?I had got an answer,but dont understand this " all processing of digital prints submitted for the server part of the system, so the prints on agents are not blocked, but can be blocked by the network part".



  • 5.  RE: DLP endpoint prevent

    Broadcom Employee
    Posted Jan 21, 2013 02:39 AM

    meaning web/smtp supported with block. But not on endpoint.



  • 6.  RE: DLP endpoint prevent

    Posted Feb 10, 2013 01:10 PM

    Hi Holy,

    please read below

    https://www-secure.symantec.com/connect/forums/can-we-monitor-dlp-idm-and-edm-dlp-endpoint

    https://www-secure.symantec.com/connect/forums/how-detect-activities-open-file-and-read-file-endpoint-prevent-dlp1111