Data Loss Prevention

If a user does any suspicious activity when he is offline on his laptop whether the DLP would be able to capture the user activity?

Or can we get report from DLP server?

Hello,

Please check this article.

https://www-secure.symantec.com/connect/forums/how-does-dlp-work-when-protected-client-goes-offline#comment-4634541

Hello,

As long as the Agent is running and has a current set of policies, we will still detect any violations when the computer is off the corporate network. The incidents are stored locally, and when it re-connects to the corporate network, the incidents will be transmitted to the Endpoint Server for processing. If the user is using a channel that you are not monitoring, the incidents will not be detected. For example, if your user was using https and you did not have https checked in your agent configuration.

I hope this helps.

Best,

Ryan