Data Loss Prevention

 View Only
  • 1.  Endpoint Device Help

    Posted Mar 14, 2013 06:33 PM

    I am trying to create an Endpoint device and use it as an exception, but I am not able to get the right setting to work.

    Here is what we have an it is not working...

    USBSTOR\DISK&VEN_KINGSTON&PR​OD_DTLOCKER\+​&REV_PMAP\S*

    Please help...



  • 2.  RE: Endpoint Device Help
    Best Answer

    Trusted Advisor
    Posted Mar 14, 2013 06:42 PM

    You probably got that from the windows UI for the device..which will NOT work

    First off there needs to be 2 "\", when creating a REGEX the "\" needs to be "\\" for it to work.

    The best way to figure this out is to use the DeviceID.exe program that is included in the AgentTools zip, that is included with the Endpoint agent zip. When you run this it will output the right setting to input into the DLP console. Keep in mind that you will probabely want to remove some portion of the output to make it work for all versions of the USB device.

    This will take all of the guess work out of it.

    Also look at the Admin guide ofr instructions on this.. its easier than you think!

    Please marked as solved if Possible!!

    Ronak