Data Loss Prevention

 View Only
Expand all | Collapse all

Endpoint Printer/Fax incident does not retain attachment

  • 1.  Endpoint Printer/Fax incident does not retain attachment

    Posted Feb 18, 2015 08:05 AM

    Hi All,

    Please let me know if this is possible.

     

    I have  created a Endpoint  policy with few keywords to detect the printing of those words, i have added a user cancel response rule to it. I have also added a response rule for incident data retention. Once i try to violate this policy, it is getting detected and also showing up the popup of User cancel. However the file which i am trying to print is not being shown in the incident.

    Please help me to understand if there is a way to retain the file.



  • 2.  RE: Endpoint Printer/Fax incident does not retain attachment
    Best Answer

    Posted Feb 18, 2015 04:46 PM

    Retaining data for endpoint incidents

    By default, the system discards original messages (including files and attachments) for endpoint incidents. You can implement the Limit Incident Data Retention response rule action to override this default behavior and retain original messages for endpoint incidents.

    Note:
        

    Limit Incident Data Retention does not apply to Endpoint Print or Clipboard incidents.