Data Loss Prevention

I am looking for a policy to monitor files copied to the google drive via googledrivesync.exe

 

I have policies in place that already block files being copied via googledrivesync.exe as I have configured application monitoring and then cloud storage. I see that under protocol and endpoint monitoring there is now possible way to get granular to pick the application you want to monitor. It seems like it is all or nothing.

 

I setup a policy to monitor Protocol and endpoint monitoring > then File name = googledrivesync.exe and so far nothing is happening. Anyone know of a better way to do this with version 14?

Mike,

There is no way to be specific to the Executable or the type of application that you want to monitor.

You can be granuallar to say the Protocol has to be "Application File Access"

Though you cannot PICK the application, It is an ALL or nothing approach.

Good Luck,

 

Ronak

Please marked solved when possible.

 

I was hoping you were not going to say that!! Thanks for the information.

I am not an expert in AFAC but I think what you want can be done. Maybe some Symantec engineer can help you out.