cancel
Showing results for 
Search instead for 
Did you mean: 
Rijo
Level 7
Report Inappropriate Content
Message 11 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

Where can I find the Orion.log file. On the epo server?

McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 12 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

c:\Program Files\McAfee\ePolicy Orchestrator\Server\Logs

Check: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/24000/PD24809/en_US/...

 

Rijo
Level 7
Report Inappropriate Content
Message 13 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

Thanks for your help. Need your help for this also. The audit log is getting flooded with following entry " The user was not authorized to access the requested URL /SoftwareMgmt/navButton.do." Why is it happening? Is there any solution for this?

Highlighted
Rijo
Level 7
Report Inappropriate Content
Message 14 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

I was able to copy the file manuall into the evidence location. There is no issue with credentials.

McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 15 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

1. Please check in the orion.log file for the copy error. Please try the DLP 11.0 P6 build once as some defects were fixed in latest releases.

2. For the audit error messages:

There was past issue where an unwanted messages was reported in ePOs audit.log:


ePolicy Orchestrator audit log contains excessive "Notify Agent" messages
Technical Articles ID: KB88281

What you see sounds simulare, but the button portion of the messages is unexpected here.

Also refer: https://kc.mcafee.com/corporate/index?page=content&id=KB71458

View solution in original post

Rijo
Level 7
Report Inappropriate Content
Message 16 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

Thank you for your extensive help. I will try checking the orion log. Currently i do not have access to epo server logs. I will gain access and let you know with the detailed error logs. And also thank you for the help with the audit log issue. Will try updating the DLP 11.0 P6 build also. Will let you know with further steps. Please be in touch. Your help will be needed.

Rijo
Level 7
Report Inappropriate Content
Message 17 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

I checked the orion log file. I am getting below logs:

dc.DataChannelAgentMessageListener - com.mcafee.keyserver.exception.KeyserverException: Key re-use not permitted: server setting disabled

service.DataChannelMessageServiceInternal - Error in notifying listeners of message Type EEADMIN_1000_KSGetMachineKeyQry
action.RegisterDocumentsActions - Could not copy files to \\Server IP\folder\regDocs
jcifs.smb.SmbException: Failed to connect: 0.0.0.0<00>/Server IP
jcifs.util.transport.TransportException
java.net.SocketException: Connection reset

 

What should I do?

McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 18 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

The error related to EEADMIN is for McAfee Drive Encryption Product.

 

The error mentioned related to copy is from DLP. Based on the error mentioned in the log file, its very clear that user does not have permission to perform the copy.

Please perform the below options and check if the issue is resolved.
1. The ePO computer account needs access to the evidence share.
2. Add the user to ”everyone” group to the UNC folder, then the issue would get resolved.

 

View solution in original post

Rijo
Level 7
Report Inappropriate Content
Message 19 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

Thanks for your support. If you could help me with the below requirement also; it would be much appreciated.

How to classify pdf containing scanned image?

There is a scanned image in pdf. How can we configure them in DLP to generate alert? 

McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 20 of 22

Re: Configure paragraph in mcafee DLP

Jump to solution

Please create a separte thread for this query as it will mix up the issues.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community