Data Loss Prevention

Hello Experts!

I just wanted to know what are the possible causes of this issue.

When I installed DLP Agent in our environment, some endpoints does report in the console and some are not.

This are the running services after installating the DLP agent in the endpoint (EDPA, WDP).

The DLP Server accomodates about 2200+ endpoints, and it's still increasing. This 2200+ endpoints already reported in the console.

Thank you

Up! Anyone...

Thanks

Please see the below points:

-> After the agent installation the Endpoint should be in network for atleast some minimum time for it to get the same reflected in console.

-> U should have enough license to accomodate all the agents to report to console

->Assuming  you have installed all the agents with the same package, make sure that the Endpoint server IP address you are mentioning during installation is correct

-> Finally try restarting the services in the Endpoint server and check,if still the issue persists raise a case with Symantec support.

Hi

Thanks for your reply,

I'm suspecting the firewall in the endpoints since it is enabled, does that affect the reporting process? 

Next, based on the information given to me, the server only has 1 working NIC, does the traffic affect the reporting process?

Dear, '

First plz verify the bort between endpoint server and agent is open or not.

1. Telnet and verify ports and firewall.
2. Verify the agent properly installed or not by Size of installation folder and services are runing automatic in services menu (WDP and EDPA services)
3. Communication/ port between Endpoint server and Enforce server
4. Restart the servers and check

I hope based on my exp, these are possible issue and solution can resolved ur problems

Hi Sorry for late reply

We've been told that we will upgrade to DLP v12.5, and based on Symantec Support, this might solve the reporting issue on the console.

I'll get back here again if we're done upgrading our DLP to v12.5 and I'll share what's the progress in reporting

Thanks