I have what hopefully is a quick question. I have DLP 9.1 and a Removable Storage Protection Rule (blocking) in place looking for SSNs moved via explorer. When copying a SSN file over to removable media DLP blocks the file and everything works as expected. When I copy a file with a large amount of SSNs (36000), the file copies and about 30 seconds later I get the pop-up that the file was 'blocked'. Obviously a huge loop hole; I can yank out the media before its blocked and I have a copy of the file.
Is there a setting or something I am missing to force a scan of a file BEFORE actually copying it to the removable storage device?