cancel
Showing results for 
Search instead for 
Did you mean: 

DLP 11.3 Events not showing on ePo 5.10

Hi! I recently deployed the DLP 11.3 on my network and we have a specific machine that has to be able to use removable disks. I manage to put an exception and make it work on this machine but in the tests, i had so many events in which dlp informs me that the removable device was blocked. 

I use the default ruleset called "Manage PnP and removable storage device" and should monitor the PnP devices too, but i dont see any events for pnp on the machines (only the removable disk one) and i cant se any event on ePo "DLP Incident Administrator"

 

This is a normal thing? How can i configure the dlp so i can se when someone inserts a removable disk or a new pnp device? (I have checked the "Notify Incident" checkbox too)

 

Thanks!

2 Replies
Highlighted

Re: DLP 11.3 Events not showing on ePo 5.10

PnP is allow or block. If you have that bundled together with a different rule that could cause problems. Try allowing the PnP rule and see if you get the events you're looking for.
Former Member
Not applicable
Report Inappropriate Content
Message 3 of 3

Re: DLP 11.3 Events not showing on ePo 5.10

@MrYellow DLP generates event for PnP and removable storage device rules as well.

If my guess is correct, it is not configured correctly to generate events. Refer to the following article and verify.

https://kc.mcafee.com/corporate/index?page=content&id=PD24505

you may refer to Youtube videos as well:

https://www.youtube.com/watch?v=-AI5UyeoeJ8

https://www.youtube.com/watch?v=bkDXBiw4pPY

https://www.youtube.com/watch?v=NgRESFRUL3w

 

Hope this is useful.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community