DLP CD ROM writing policy continues events causing slowness issue
We are using McAfee ePO at our organization with DLP 11.3 and 11.4. Last few days without any changes in the policy we are facing a problem of machines reporting empty CD/DVD threat events 19115 continues also users are reporting system performance issue.We don't want ePO to generate threat events every one minute when there is no cD or dvd inserted. Would appreciate if you can provide a solution.
So if your policy has Device rules enabled, then DLP would record these Device Plug Info and send it to EPO. These events would be generated when a device is plugged using the USB slots or other slots in the computer. Even when a mobile phone is connected to machine with DLP installed and with device rules enabled you would see these events in the EPO.
Re: DLP CD ROM writing policy continues events causing slowness issue
In addition to the comment made by @jsubbura, a device plug event for a CD/DVD drive will be seen each time Windows recognizes the drive as being active. This can occur after a start up or reboot. Windows can also place the optical media drive in a low power state after a certain amount of idle time. When a user or process accesses the drive, the connection to the drive is re-established in Windows. As a result a "device plug" event is generated.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.