cancel
Showing results for 
Search instead for 
Did you mean: 
rpd85
Level 9

Cannot get DLP agent bypass events to appear in DLP monitor

Hello,

When using the DLP Help Desk Tool to generate override codes for DLP endpoint agents, I am unable to get any of the associated events to appear in the DLP monitor.

The Help Desk Tool successfully generates release codes and connects to the database without error. I attempted to create filters to show the following administrative events: "Agent Override Key Generated", "Agent Enters Bypass Mode", and "Agent Leaves Bypass Mode".

However, all I get is a blank screen, as the filter returns no events.

Under "agent configuration", all events are selected to be reported by the agents.

Our DLP Monitor is showing client events for all of our device rules, with no problems.

Any tips on how to troubleshoot this are appreciated.

0 Kudos
2 Replies

Re: Cannot get DLP agent bypass events to appear in DLP monitor

Does the Agent bypass work correctly, even though nothing comes up in DLP Monitor?

Which version of DLP endpoint are you using?

Have you tried sending the events back to the server, by clicking "Send Events" from the McAfee Agent Monitor on the workstation, soon after the bypass is enabled?

Can you see the activity in the ePO Audit Log?

0 Kudos
virgona
Level 9

Re: Cannot get DLP agent bypass events to appear in DLP monitor

Did you mark the "Hide Administrative Events" button?

DLP Monitor toolbar.JPG

Message was edited by: virgona on 6/19/13 5:53:08 PM HKT
0 Kudos