Data Loss Prevention

HI everyone,

Our windows file shares have the option enabled for Previous Version, this enables users to restore a previous version of a file on a share they have access to.

If a file triggers a rule during our scans the file is removed and placed in a quarantine, a stub file is left in its place giving options availabel to the user, one of which is to request a file restore from the DLP team. The user can bypass this process and simply restore the file from the Previous Version utility themselves, how does everyone else handle this, can the store for the previous versions be scanned and therefore quarantined?

Any advice appreciated.

Thanks

Ralph

Ralph,

you you can quarantine the file this is configured wher eyou set up the scan, you need to create a response rule and it willleave a little note behnd to tell them where to find the file and who to contact..