DLP Device Control

[kblowe]

Can DLP install as a standalone application without communicating with an ePO server?

[DLP_RS · Accepted solution]

We can install the client build as standalone installer. However as DLP is a fully managed product, there will not be any use of it. ePO is mandatory to apply DLP policies and enforce rules.

[Corey-DLP]

DLPE can be installed as a standalone application, however DLP policy configurations will still need to originate from an ePO server. Do you not have an ePO server or do you have a set of systems that are air gapped? 

[kblowe]

We have some systems that are not on the network, therefore can't communicate with an ePO server.

So is there a way to configure policies in ePO and take those settings and import to a machine or GPO or some sort?

I read in this article here https://community.mcafee.com/t5/Data-Loss-Prevention-DLP/Applying-DLP-agent-policiies-without-EPO/m-...

that there is a way to import/use the policy in ePO. Is that true?

[DLP_RV · Accepted solution]

Thats not a standard supported workflow, if you are looking some kind of customization then please contact McAfee Professional Services Team.

[kblowe]

I will be installing a DLP supported version 11 or higher during testing. We spoke to our Sales Rep and we plan to test what is mentoned in the thread about policy injections in our test environment, and see how it works out for us.

[cpromen]

Is there a white paper or any documentation on how to use DLP in air gapped enviroments?  We can configure an ePO server in that enviroment to create policy, but the ePO server would also be isolated. Is this possible?