Data Loss Prevention

Hi all,

If I want to scan "enforce server" local file system in Discover Targets
Use network path (e.g. \\server\c$)  is the only way for scanning the local file systems in Enforce server? Pls advise.

Thanks.

Best Regards,
Sunny

The network path of the admin shares is a good option.  It can also be any shared drive on the system.  There is also the option of using a Windows scanner locally.  Not sure of the licensing for the last option.

Hi all,

We cannot choose the network path because we perform a OS hardening for denying to share a drive or folder.  How to setup a Window Scanner? Pls recommand the steps.

Thanks.
Best Regards,
Sunny

I can understand why you cannot use the local system in the scan targets,
considering the fact that the enforce server is not a file repository, it is unlikely you would like to scan the server.
Moreover,
If you would like to upload an IDM/EDM profile to the server you can use a local directory, which suggests that the possibility that you would have confidential data on the enforce server is pretty high, and scanning the enforce server would not be relevant.

If you would like to scan the enforce server and the server is windows (not linux) what you can do is to install a DLP agent on the server and run an Endpoint Discover scan on the server 

Kind Regards,
Naor Penso