Data Loss Prevention

Hi,

I use DLP Endpoint prevent 11.1.1

I have a peculiar situation, in which one of the agent in the laptop is showing as connected (green) in the console, but whatever incidents are generated in the laptop are not captured in the DLP console. I tried this with the laptop on and off the network.

Please suggest on what could be the problem.

Thanks,

Vinodh Stanley

Hi Vstanley,

Restart the agent or endpoint server

1)if not getting any endpoint incident from any agent machine then restart Endpoint server

2)if som eincident getting from different machine then restart the agent or dlp services of agent machine.

Let me know the result.

Please reinstall the agent and check again.

Hi;

Some cases you must restart the client after install for working successfully.

If you restarted the client. And also the incident not generated. Can you please send the policy which you can test. And the endpoint agent configuration on enforcer site for futher help. 

One approach you may want to use to verify the policy is working locally, is by creating a policy that flags an incident with a keyword. Select something like: thisismysecretkeyword (or some string together). Enable the policy to create the pop-up notification for the user as a response rule. This will enable you to verify that the incidents are even being generated in the first place.

If you do indeed get the popup function, then it might be something on the Enforce side. Restarting the server is usually a safe bet. If you can't restart the system or would prefer not to, you can restart the services manually.

If you are still having an issue, post back and let the folks here know.

Thanks Shawn. I will test as suggested and get back to you.