Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

DLP 11.6 endpoint agents not capturing attachments in incidents

Created: 02 May 2013 | 1 comment
abhaysingh's picture

The incidents generated by DLP endpoint agents display the attachments but they donot contain the actual attachment. For some incidents I can open and see the actual attachments but for others I can not. Please suggest the settings required.

Operating Systems:

Comments 1 CommentJump to latest comment

AMyers6671's picture

You'll need to create an automated response with an action of 'Limit incident Data Retention'. On this, choose the last box (on 11.6 anyway) indicating 'Retain Original Message'.

Keep in mind, this can generate a LOT of data and network traffic depending on policy and size of files being captured and stored.

Aaron

response.png

If this post has helped you, please vote up or mark as solution to help others looking for the same data.