Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Driver Install issues with DLP Endpoint Agent

Created: 08 Nov 2012 | 7 comments

Hi all-

 

We are having issues where any machine with the DLP agent is installed won't allow any driver installs to complete. We are constantly having to disable the agent when performing driver installs. (print drivers, software installs, etc..) Any thoughts on how to resolve this?

Below are the things that I have listed to ignore.

 

FILE Path on Destination:
$Cookies$\*
$InternetCache$\*
$LocalAppData$\*
$LocalAppData$\..\Temp\*
$LocalAppDataLow$\*
$RoamingAppData$\*
$Windows$\Prefetch\*
$Windows$\SoftwareDistribution\*
*\Drivers\*
*\Program Files\Manufacturer\Endpoint  Agent\*
*\System Volume Information\*
*\Windows\System32\*
C:\Program Files\Symantec\Symantec Endpoint Protection\*
C:\ProgramData\Symantec\Symantec Endpoint Protection\*
C:\Users\All Users\Symantec\Symantec Endpoint Protection\*
 
File Types:
*.adm, *.aw, *.bdr, *.bin, *.cab, *.cat, *.chm, *.com, *.cpl, *.cur, *.dat, *.dl_, *.dll, *.dll_1033,
*.au, *.avi, *.lrc, *.med, *.mid, *.mov, *.mp, *.mp3, *.mp4, *.mpe, *.mpg, *.mpeg, *.ogg, *.ra,
*.dcx, *.dds, *.dib, *.djvu, *.ecw, *.emf, *.fsh, *.g3, *.gif, *.grd, *.icf, *.iff, *.icl, *.ico, *.ima,
*.drv, *.exe, *.fae, *.hlp, *.ime, *.inf, *.ini, *.inx, *.lnk, *.mecontact, *.mof, *.mui, *.nls, *.ocx,
*.exe
*.img, *.iw44, *.j2k, *.jng, *.jp2, *.jpc, *.jpe, *.jpm, *.jpeg, *.jpg, *.kdc, *.lbm, *.ldf, *.lwf,
*.inf
*.mng, *.nlm, *.ng, *.nol, *.pcd, *.pcx, *.pgm, *.png, *.ppm, *.ppx, *.psd, *.psp, *.ras, *.raw,
*.mp3
*.ost
*.pnf, *.so, *.sys, *.tcl, *.tlb, *.tpi, *.ttf, *.ver, *.vxd, *.windowslivecontact, *.windowslivegroup,
*.pst
*.rgb, *.rle, *.san, *.sff, *.sfw, *.sgi, *.sid, *.tif, *.tiff, *.ttf, *.wbmp, *.wmf, *.xbm, *.xpm, *.aif,
*.rm, *.rmi, *.snd, *.swf, *.wav, *.wma, *.wmv
*.sys
*.v2i
*.vmdk
*.vmem
*.wmf, *.xsn, *.acr, *.ani, *.asf, *.b3d, *.bmp, *.bpm, *.cam, *.clp, *.cr2, *.crw, *.cur, *.dcm,
hiberfil.sys
msiexec.exe
setup.exe

 

Comments 7 CommentsJump to latest comment

yang_zhang's picture

Could you please help to attach the log of the DLP agent?

If a forum post solves your problem, please flag it as a solution. If you like an article, blog post or download vote it up.
kishorilal1986's picture

Hi NY Giants,

Could u plz share the logs or error msg for above. Also I am not confirm above the exclusion path for local folders for DLP agents. It seems to be Drivers program files exclusion issue or may be virus issue.

kishorilal1986's picture

hi NYGiants,

please add exception for monitoring the *C:\Program Files\  with the file type that are associated drivers.

else uninstall the DLP agent from machine and install the drive and then initaite DLP agent installaltion activity.

NYGiants's picture

Thanks Kishorial-

 

I tried that as well but that didnt work. Do i need to put commas after each folder destination that I listed or is it ok to just keep it the way that it is?

Maybe thats the issue?

kishorilal1986's picture

Hi

Add exception for monitoring the *C:\Program Files\ which will apply for all program files.for file type u may need commos after each file type.