DLP Excluded Serial Number & User Pair Not Working

[User76287310]

Hello, I have been tasked with cleaning up our current DLP processes and am rebuilding our policy from scratch. We utilize IronKey encrypted USBs with McAfee DLP. Our security staff would like for us to use serial number and user pairs as this is more secure than device templates. We have used DLP and Iron Key together for a few years and I was able to get device templates to work so I know IronKey is compatible with McAfee's DLP. The issue I seem to be having is paired serial and user does not seem to recognize the IronKey. When I plug it in it is unable to load the files on the IronKey. However when I use device templates it works perfectly. I noticed that device templates uses Serial Volume whereas Serial and User Pairs use the serial number and ad user. I tried both the short serial that is on the USB device and the longer serial that you would find in the Details tab of the device properties. Do you have any suggestions on how to get this working?

[Dilip1]

I was able to get through this by adding the user name as username@(hostname of the machine). They would ask for the user@fqdn. FQDN here refers to the hostname of the laptop. Let me know if this works.  

[User76287310 · Accepted solution]

We ended up just adding the serial numbers as a device template. McAfee determined due to the way Ironkeys work it would not be feasible to pair them to AD accounts. 

[jsubbura]

Hi @User76287310 ,

Thank you for writing in here.

We would recommend you to open a case with McAfee Support as we would need to perform a detailed troubleshooting over a remote session using the DLP Diag tools and with the device which is plugged in.

Thank you