Data Loss Prevention

 View Only
  • 1.  DLP Endpoint copy to Local Drive

    Posted Apr 03, 2012 12:04 PM

    We are trying to exempt certain directories from the Endpoint copy to local drive, but it doesn't seem to work.  We are trying to exempt several temp directories by adding an ignore filter in the local drive that has *\temp\* and *\prod\jobs\* in the path.  Any idea why this doesn't work?

    path =

    $Cookies$\*
    $InternetCache$\*
    $LocalAppData$\*
    $LocalAppData$\..\Temp\*
    $LocalAppDataLow$\*
    $RoamingAppData$\*
    $Windows$\Prefetch\*
    $Windows$\SoftwareDistribution\*
    *\System Volume Information\*
    *\​Temp\​*
    *\prod\jobs\*



  • 2.  RE: DLP Endpoint copy to Local Drive

    Posted Apr 04, 2012 12:00 AM
      |   view attached

    Hi Jsneed,

    I have researched and found your monitoring setting might be selected for local drive

    Please check and unmark filter action setting and select ignore option button in filter action of Agent config.

    for making those config changes go to System->Agent->Agent config->Configaration->Add monitoring filter section and check those setting under your local drive monitoring.

    I have also attached the snapshot which will give you easy understanding of config setting and will help to do the same.

    I hope this will work for you.



  • 3.  RE: DLP Endpoint copy to Local Drive

    Posted Apr 05, 2012 09:57 AM

    That is exactly where we have them entered and they still don't work properly.