DLP Discover cannot re-run scan

[m_lo]

Discover 11.5

epo 5.10

Run status shows completed with error.

Upon checking error, mentioned "Could not copy to evidence share", did re-configuration.

Saved and Applied policies, the scan did not start, command column for 'play', 'pause', 'stopped' are greyed out.

[Corey-DLP · Accepted solution]

Hello and thank you for posting here!

Is your scan schedule configured as "run immediately"? For a scan task to run at the time of policy enforcement, the "run immediately" scan schedule must be selected in the scan task. Once received on the managed system, the scan should execute as soon as McAfee Agent communicates with ePO and performs a policy enforcement. If another scan schedule is configured in the rule, the scan will wait for the configured time until the scan starts.