Data Loss Prevention

Hi All,

We've been on a case for a week, our client is having issues with uploading excel files on SAP. For some weird reason, a dialogue box that asks for a consent if the user wants to continue on uploading the excel file on to SAP, the pop-up has something to do with clipboard, a yes or no option is also included in the pop-up, when the user selects yes it uploads on the other hand if no, it does not upload. The weird thing is that this occurs every morning then becomes okay after a few hours and a couple of times of trials in uploading. According to the users, they were not having this issues, until this month and not sure if it is a coincidence but we just upgraded from DLP 12.5 to DLP 14.0 this month. We made configuration because the first issue they encoutnered was they weren't able to upload on to SAP but after the configurations we've done, uploading got back to normal. 

What we've done so far which we thought would be able to fix the issue.

• We have disabled Clipboard from agent monitoring 
• We have filtered .xls or .xlsx file formats with ignore as action on application access
• We unchecked Clipboard on SAP application configuration and unchecked application file access 

We did not do these configurations in one day, every configuration did the job, but the next day, the pop-up occurs again.

Are we still missing some configurations? I mean, for some really weird reason it occurs at the start of the SAP team's day.

Hoping for some inputs. I'm thinking that maybe because of how the filters are ordered? I don't know. I'm out of thoughts and ideas. I am currently waiting for the support.

I attached images of what we've done.

Thank you in advanced.

Regards,

Dave

 

 

 

Hello,

Are you sure it's a DLP Alert? Yes or No pop-up doesnt look like DLP stantard alerts...

Hi Morgado,

I have explained to the client a couple of times that the pop-up is created by Microsoft Excel and it is not an error because no error provides a Yes or No option. I know that DLP can block Clipboard in a way that if something is being copied on to the clipboard it is blocked immediately.

I'm having difficulties in defending DLP since I am just starting with this product.

Thank you and Regards,

Dave

 

Attached is the pop-up

Looking to your configs (monitoring & filters) this issue doesnt seem to me related to DLP. Its looks more a 3rd party app or excel macro... that could be parsing the Excel data.

These users actions are generating any incident/log at the DLP Console?

 

Probably the best approach here 'd be to disable temporarily the user DLP Agent to confirm or not if the DLP is the root cause.

That dialog box is not asking for consent to upload a file, it is Microsoft Office asking if the user wants to keep in memory all the data they have copied to the clipboard in the most recent cut/copy operation (CTRL-C or CTRL-X).  Are the users cutting and pasting the file into a field in SAP?  If so, then they need to answer this question every time they cut and paste large amounts of information.  If not, then they likely have a macro, application, or extension that is intercepting file the clipboard to upload the file and they need to figure out if that is a requirement for the SAP app.

In any case, this isn't a DLP issue, it is a Microsoft Office<>SAP issue.

 

Here's a link to an MS article about this:

https://support.microsoft.com/en-us/kb/287392

this is a DLP issue for sure. I turned off the agent and everything works fine. As soon as I turn it on - i get 0 data from the uploaded file on my SAP screen. 

 

Hi Arminpohl,

It depends on the error you get and the formate of the file you're uploading.

Would you happen to have a screenshot of the error?

You may ask to exclude SAP and specific files from your DLP Administrators.

In my client's case, it was not an actual error and DLP would have not done anything since we already disabled scanning on the specified area that DLP may scan which here is Clipboard.

You may upload the error you encounter here or ask help from your DLP Admin for remediation.

Thank you and Regards,

Dave 

If I debug in sap and set a breakpoint inside the import clipboard method. It does populate the sap screen transaction with the uploaded excel file. If I just run it in for ground orveven debug outside of that specific method.... Then the screen is blank with no uploaded data. I randomly get that clipboard popup you get. In sap the data is there in the clipboard right before the import clipboard method. Very strange. If we turn off dlp agent then it works every time as normal

We have same issue here We did what he did and it doesnt solve anything.We have 15.5 mp2 deployment and because of that we cant install agent to that computers.Is there any new configuration for us. is it gonna solved with 15.7 deployment?
Original Message:
Sent: 07-31-2016 09:21 PM
From: Migration User
Subject: DLP is blocking upload on SAP

If I debug in sap and set a breakpoint inside the import clipboard method. It does populate the sap screen transaction with the uploaded excel file. If I just run it in for ground orveven debug outside of that specific method.... Then the screen is blank with no uploaded data. I randomly get that clipboard popup you get. In sap the data is there in the clipboard right before the import clipboard method. Very strange. If we turn off dlp agent then it works every time as normal

I have that same problem. Has anyone found the solution to the problem?
Original Message:
Sent: 07-31-2016 09:21 PM
From: Migration User
Subject: DLP is blocking upload on SAP

If I debug in sap and set a breakpoint inside the import clipboard method. It does populate the sap screen transaction with the uploaded excel file. If I just run it in for ground orveven debug outside of that specific method.... Then the screen is blank with no uploaded data. I randomly get that clipboard popup you get. In sap the data is there in the clipboard right before the import clipboard method. Very strange. If we turn off dlp agent then it works every time as normal