Data Loss Prevention

Hi I created a simple policy to monitor clipboard and I find out that it will create an incident only if text is placed inside clipboard and not images (for example screen clippings, print-screen,...) It is right??

how have you set the policy?

have you selected IDM?

Hi Pete,

This is a simple policy, I created a policy and set protocol to clipboard and limit it to a single user.

Whenever I put a text in clipboard (from simple programs such as notepad or complex one such as adobe acrobat) it will create an incicent. But when I put an image (with print-screen or snipping tool) there will be no incidents.Did I miss something?

 

Hi Reza,

Printscreen cannot be monitored by DLP and it has to be deactivated from the Windows Registry. As far as Snipping tool is concerned, I think its the same story .. but you should check by adding it into the Application Monitoring . I hope that helps . 

It is really strange that Symantec DLP cannot monitor that. It seems there are lots of methods to leak data which is not covered by DLP....