Data Loss Prevention

 View Only

  • 1.  how fast dlp agent can send incident to endpoint and goes to enforce

    Posted Mar 05, 2018 08:16 PM

    how fast dlp agent can send incident to endpoint and goes to enforce? and can we make so that agent respond in realtime in sending the incident?



  • 2.  RE: how fast dlp agent can send incident to endpoint and goes to enforce
    Best Answer

    Posted Mar 05, 2018 11:22 PM

    Hi Dwi,

    Please make below changes in DLP agent configuration:

    EndpointCommunications.HEARTBEAT_INTERVAL_IN_SECONDS.in=10

    EndpointCommunications.IDLE_TIMEOUT_IN_SECONDS.int=0

    Endpoint Server Setting: -

    ServerCommunicator.CONNECT_POLLING_INTERVAL_SECONDS= 15



  • 3.  RE: how fast dlp agent can send incident to endpoint and goes to enforce

    Posted Mar 06, 2018 01:24 AM

    Check below Dwi and see how to configure the alert notifications:

    https://support.symantec.com/en_US/article.HOWTO126799.html

    Thanks!



  • 4.  RE: how fast dlp agent can send incident to endpoint and goes to enforce

    Posted Mar 08, 2018 06:06 AM

    Many Thank's for the answer from  both of you, right now so far we can work it around with Amit point,



  • 5.  RE: how fast dlp agent can send incident to endpoint and goes to enforce

    Trusted Advisor
    Posted Mar 08, 2018 03:51 PM

    DWI..

    Keep in mind that when you make this change the number of Agents supported per server will be greatly reduced. The change changes the chekin time to 10 seconds, which means a lot of talking from each agent to the servers. - Which means a lot of load on the server.

    I would only do this if you have a small amount of endpoints per server OR you are doing this for testing puposes.

     

    Good Luck

    Ronak