Data Loss Prevention

 View Only
  • 1.  DLP Agent breaks PSEXEC services

    Posted Jan 29, 2018 10:40 PM

    Hello,

     

    Our company is starting to deploy Sym DLP v14.6.0200.01053 and we have found that it breaks PSEXEC on all machines it is deployed to.  Anyone else having the problem and is there a work-around becuase we rely heavily on this service.  I have even found that when I uninstall it, PSEXEC will still not work and havent figured out a way to revert the changes made with the DLP installation. 

     

    Any help would be greatly appreciated.



  • 2.  RE: DLP Agent breaks PSEXEC services

    Posted Feb 19, 2018 02:29 PM

    The DLP agent does in fact interfere with certain sysinternals tools. You can simply add the executable PSEXEC.EXE to an Application Monitoring rule and exclude network channels, and I've had good luck getting around that restriction in the past using that method.