I hope someone can help.
We have setup DLP for Mac via EPO, We are able to block/Allow Removable storage and can see the logs in the Incident Manager however we cannot see any logs for the files that are copied.
We need to allow all devices for now but log all files that are copied.
I have enabled the monitor/Evidence options in the device policy and have made sure that the reporting service is enabled on the client configuration.
After reading the admin guide I get the idea that this may not be possible when using Mac Clients, Can anyone give their experience please?
Many thanks in advance.