Data Loss Prevention

I wonder if there's a way to block upload from dropbox, drive, skydrive desktop apps using DLP Endpoint

Sites such as dropbox, drive and skydrive can be block [using Application Monitoring], but its desktop apps can't. 

I add such applications to Application Monitoring page, but it's still uploading :(

Hope anyone knows how-to or maybe a workaround.

Thanks a lot

hi,

Hope this thread will help you.

https://www-secure.symantec.com/connect/forums/dlp-115-0#comment-7200681

https://www-secure.symantec.com/connect/forums/dlp-solution-dropbox-and-skydrive

you need to add application monitoring

from the Enforce Console:  System --> Agent --> Application Monitoring add these applications.

Hi haroldvm89

If u already added those protocols/ application in your application monitoring and still uploads happens then verify which browser u are using, I mean there are IE and Mozilla browsers are suppoted to DLP agent monitoring. 

Second possibility chcek whether user/ test is uploading throgh stand aslon proxy application which might encrpting the endpoint traffic. etc.

I think u need to blacklist (minitor ) thsese url specifically and create responce rule to block the same.

Regards

Kishorilal

Hello K S Sharma!

Blocking sites such as Dropbox, Drive and Skydrive can be blocked using Application Monitoring and adding the proper configuration for each browser (e.g IE, Firefox, Chrome)

However, I'm looking for a way to block its desktop application. [Dropbox has an app that is installed on Windows, and syncs a specific folder to your Dropbox cloud]

:)

Application monitor is way to go ahead with :-).

block installation of such or any unauthorized software using proper group policies/preveilages. USing SEP application and device control, u can achive this. As DLP is for internal to external information leakage. It has some feature to support above scenirio but it has some limitation as well.

Go to System / Application Monitoring. Add Application Monitoring

For Dropbox (it works!)

For Skydrive (it works!)

For Drive (it doesn't work, but it should be like this) ***No solution yet

Application Monitoring configuration should be left as default. Mark all.

Thanks you all