cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

DLP CD ROM writing policy continues events causing slowness issue

We are using McAfee ePO at our organization with DLP 11.3 and 11.4. Last few days without any changes in the policy we are facing a problem of machines reporting empty CD/DVD threat events 19115 continues also users are reporting system performance issue.We don't want ePO to generate threat events every one minute when there is no cD or dvd inserted. Would appreciate if you can provide a solution.
2 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: DLP CD ROM writing policy continues events causing slowness issue

HI @KrishnaYadav ,

Thank you for writing in here.

As per the KB below event ID 19115 belongs to Device Plug Info

https://kc.mcafee.com/corporate/index?page=content&id=KB83810&locale=en_AU&viewlocale=en_AU

So if your policy has Device rules enabled, then DLP would record these Device Plug Info and send it to EPO. These events would be generated when a device is plugged using the USB slots or other slots in the computer. Even when a mobile phone is connected to machine with DLP installed and with device rules enabled you would see these events in the EPO.

 

Thank you.

Regards,
Jithendran S
McAfee Employee
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: DLP CD ROM writing policy continues events causing slowness issue

In addition to the comment made by @jsubbura, a device plug event for a CD/DVD drive will be seen each time Windows recognizes the drive as being active. This can occur after a start up or reboot. Windows can also place the optical media drive in a low power state after a certain amount of idle time. When a user or process accesses the drive, the connection to the drive is re-established in Windows. As a result a "device plug" event is generated.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community