Data Loss Prevention

Does symantec DLP endpoint agent generate incident when we copy data from pendrive to mobile's SD card using Laptop with DLP endpoint agent? Mobile is connected to laptop via USB cable.

It depends on the OS and the way that the phone presents itself.  If the phone presents as a standard USB drive then the transfer will be blocked.  However, many newer phones are recognized by the OSes and have their own drivers to facilitate file transfers.  In this case the transfer will not be blocked.

Dear Umesh,

 YES......

An incident snapshot provides detailed information about a particular Endpoint Prevent incident. It displays general incident information, matches detected in the intercepted text, and details about attributes, incident history, and the violated policy. You can also search for similar incidents in the Correlations area.

Note:  Endpoint Discover incidents are captured in Network Discover reports.
 

If you have configured any Smart Response rules, Symantec Data Loss Prevention displays a Remediation bar (under the Status bar). The Remediation bar includes options for executing the rules. Depending on the number of Smart Response rules, a drop-down menu may also appear.

The top left section of the snapshot displays general incident information. You can click most information values to view an incident list that is filtered on that value. Information in this section is divided into the following categories (not all of which appear for every incident type):

Incident type
 
CD/DVD burners (for example, Windows Media burner)
 
Removable media (for example, a USB flash drive or SD card)
 
Local drive
 
Network Share
 
Email/SMTP
 
HTTP
 
HTTPS/SSL
 
FTP
 
IM:AIM
 
IM: MSN
 
IM: Yahoo
 
Print/Fax
 
Clipboard
 
Application File Access