Dear,
I like to now if its possible to retain the files if there is in the local drive, in the rule created only work with removable store device.
The rule using a EDM profile to mach and this is the configuration of the enpoint
The version of dlp is 14.6 MP1 - three tier instalation.
| Endpoint Destination: Detect when users move data on the endpoint to these places: | |||||||
| |||||||
| Endpoint Applications: Detect when applications access files: | |||||||
| |||||||
| Match On: |
|
Using a excel file to test the policy and in the application monitoring from excel is set in read
Application Monitoring Configuration
Select the channels to monitor:
For 14.5.x and earlier agents, selecting any of Removable Storage, Local Drive, Copy to Network Share, or Application File Access enables monitoring for all of the following channels: Removable Storage, Local Drive, and Copy to Network Share.
Likewise, for 14.5.x and earlier agents, selecting either HTTP or FTP enables monitoring for both HTTP and FTP channels.
Destinations
- Removable Storage
![]()
- Printer/Fax
![]()
- Local Drive
![]()
Clipboard
- Clipboard
- Copy
![]()
- Paste
![]()
Web
FTP![]()
- HTTP
![]()
Application File Access
- Application File Access
- Open
![]()
- Read
![]()
Network Shares
- Copy to Network Share
![]()