Data Loss Prevention

 View Only
  • 1.  How to disable printer incidents from specific policy.

    Posted Feb 20, 2017 02:15 AM
      |   view attached

    Hello.

    I want to disable false positive incident generation of printing for specific policy. The reason is phisically it is impossible to analyaze all incidents. Ask any additional information if you need for resovling this issue. I attached the screenshot of incident. 



  • 2.  RE: How to disable printer incidents from specific policy.

    Trusted Advisor
    Posted Feb 20, 2017 04:36 AM

    hello,

     in order to exclude printer from a specific policy you could add an exception based on protocol ("Endpoint destnation / Printer/fax").

    if you want to exclude printer from all policies, you need to update agent configuration and remove "Printer/fax" from monitored channel.

     

     Regards