Hi, I would like to seek advice on my Symantec DLP Vontu. Would like to find out what happens when EDPA and WDP services stopped running? Appreciate your response.
If these service will stop, dlp agent can't be work and not be protect the data
https://www-secure.symantec.com/connect/forums/dlp-query-1
https://www-secure.symantec.com/connect/forums/how-protect-symantec-dlp-endpoint-agent-services-edpa-wdp
Thanks for the prompt response. That means to say that if edpa and wdp are stopped, any data movement out of the machine cannot be recorded by the endpoint agent?
Just to obtain a firm answer so I can answer my client. Thank you.
Yes, when the service stop dlp agent not be track it.
Above comment link will help you to protect the service from stop.
If the servies stop then the agent will not work. Having said that this scenario takes signifigant work becuase the services look after each other. If EDPA stops then WDP will start it back up and vice versa. Additionally with tamper protection engaged even a local administrator is unable to stop the services without the endpoint tools on the agent which should not be on the box unless actively being used by the DLP administrator.