Blocking sensitive contents from i.e. PDF file from being captured by tools like Snipping tool etc.

[Anas_shaikh]

Hi guys,

I wanted to block a particular file say a PDF fIle has a confidential data and I dont want any one to take its screenshot by snipping tool. Here is what I did so far but nothing is working out

First approach(not working)

• I created a simple content classification criteria Namely Screen Capture PDF Block which simply includes all the files with extension as PDF
• Then I Created a Screen Capture Protection Rule with the following configuration:

                    Under Condition tab:

                            Classification: Screen Capture PDF Block

                       End-user:  Any user

                       Applications visible on screen:  Any  application

                Reaction tab: 

                           Action: Block

Second Approach(Also not working):

• I created an application template for snipping tool say Snipping Tool template
• Then created a test Application File access Protection Rule with the following configuration:

            Condition Tab:

              Classification: Screen Capture PDF Block

             and End-User: Any User

            and Applications: Snipping Tool template

          Reaction Tab:

             Action: Block

I  know I am missing something very basic here . Any help will be appreciated 

[DLP_RS]

Suggestions--

1. Screencapture rule will only work with Application based content fingerprinting Not just content classification.
2. First verify using DLP Diagnostic tool if the files are actually classified as per Application based content fingerprinting.
3. If yes, the rule should trigger.

If not, log a service request with McAfee Technical Support.

[Anas_shaikh]

Hi There ,

Thanks for replying. Can you share a link or tell me where can I find/download the DLP diagnostic tool.

I am not really sure If am following the right approach for solving this particular problem. can  anyone also suggest other ways for solving this kind of problem(Preventing screen-capture of sensitive PDF file). How would you go about solving this?

Looking forward for your reply

Thanks a ton