Hi! I recently deployed the DLP 11.3 on my network and we have a specific machine that has to be able to use removable disks. I manage to put an exception and make it work on this machine but in the tests, i had so many events in which dlp informs me that the removable device was blocked.
I use the default ruleset called "Manage PnP and removable storage device" and should monitor the PnP devices too, but i dont see any events for pnp on the machines (only the removable disk one) and i cant se any event on ePo "DLP Incident Administrator"
This is a normal thing? How can i configure the dlp so i can se when someone inserts a removable disk or a new pnp device? (I have checked the "Notify Incident" checkbox too)