Data Loss Prevention

Hello,

I create a new IDM profile for one pdf file and create a new rule to my endpoint server detect a incidents when the pdf file is copy to a removable storage, Its possible use IDM with endpoint agent? because no incidents are create or is bad configuration of the rule , can helpme?

I read this KB https://support.symantec.com/en_US/article.TECH233905.html and all the , in the endpoint server and the advance configuration are correct.

Attach some image from the config

Hello Tokyo2014!

Partial and Exact Detection is already configured by default in AgentDLP if you have done a recent DLP installation. If you have upgraded version, you will need to check the required settings as described on page 539 of the Admin Guide (Using Agent IDM after upgrade to version 14.6).

Before doing the above configuration, check the Agent DLP logs if the policy was applied and the file in question was scanned.

Regards,

Diego