Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 0 subscribers
  • Views 28721 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Odd behavior from monitor only policy

dhhhhhh

Has anyone else ever seen an issue where a subset of machines all in the same policy group, all showing same as policy, acting differently when processing the same file moves from local storage to a USB thumb drive? That is one machine processes the policy accordingly and flags the data control policy correctly in the logs and the other just notes a file was processed, no policy to be found?

:37645


This thread was automatically locked due to age.
Parents
  • 0

    Hello dhhhhhh,

    DLP does kick in and logs an event but details of the source are missing. Can't say what could cause this. All 5 machines the same (OS, compliant with all the other policies)? Don't think that turning on verbose logging (locally from the client's GUI) will give more insight but you could give it a try.

    Christian

    :37723
Reply
  • 0

    Hello dhhhhhh,

    DLP does kick in and logs an event but details of the source are missing. Can't say what could cause this. All 5 machines the same (OS, compliant with all the other policies)? Don't think that turning on verbose logging (locally from the client's GUI) will give more insight but you could give it a try.

    Christian

    :37723
Children
No Data
Unfiltered HTML