Data Loss Prevention

Hello,

I've a strange issue with Endpoint Prevent. Our DLP environment is running 14.0.1 version. I've created a very basic keyword based policy for testing purposes and noticed that the Print monitor only detect pdf files. There aren't any endpoint printer incident which contains for example .doc file.

I've already checked the following:

- The policy contains all word processing (all file type)

- The agent configuration contains Printer/Fax protocol, channel

- The agent configuration does not ignore or exclude .dox, .docx fily types

- I'm sure that users print confidential .doc files (the policy should detect them)

After this I have created a VML index based policy which can detect .doc files when they are being printed, so they problem is seems to be related to the keyword based (DCM) technology not the printer channel. We use network printers, do DLP handle different way the pdf and doc files with keyword policies?

Thanks for any help,

regards,

Laszlo

Not that I am aware of.  I recomend opening up a suport ticket and have them deal with it.  Might be faster to get an answer.

Let me know if you figure it out w/ support.

Hi,

This issue has been addressed in 14.0.2. Ther was bugs in 14.0.1. Please upgrdae the DLP ver and check the neccesory config,

Please refer below KB for more info

https://support.symantec.com/en_US/article.DOC8235.html

Please let us know if still any challenge/query

Hi,

I will do the upgrade on 05.05 and get back with the results :)

Regards,

Laszlo

Hi Laszlo2,

Any update. is your issue resolved now. ?

Unfortunately we have some problem with the upgrade so I don't know that version 14.0.2 solve the issue yet.

regards,

Laszlo