cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

DLP Help Desk Help

Jump to solution
Hi, I am testing out the DLP Help Desk feature by trying to block/release files that have sensitive information. So far I have managed to block files that contain the word sensitive from being copied to a USB drive. The issue that I am seeing is that when I do the release request and Mcafee DLP is temporarily suspended, I still cannot copy files to the USB drive. Is this a function of DLP or i am doing something wrong? Thanks
1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: DLP Help Desk Help

Jump to solution

Hi @User79252722 ,

Thank you for the details,

I have tested the same and there is no issue seen,

Screenshot of DLP Incident when there is no Bypass,

block.PNG

 

Screenshot of DLP Incident during the Bypass Mode,

bypass.PNG

 

I was able to copy the file to the thumb drive when DLP was in bypass mode, however, DLP's design is to monitor the copy action though its in bypass mode. 

 

Thank you.

Regards,
Jithendran S
McAfee Employee

View solution in original post

7 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: DLP Help Desk Help

Jump to solution

Hi @User79252722 ,

Thank you for writing in here.

When DLP is bypassed with the help of Help Desk by choosing a time (say 5 minutes) during which it should be in suspended state, then DLP should not block the file transfer during that suspension period (5 minutes). After 5 minutes DLP would resume its operations.

May we know which is the rule you are using, windows version and DLP version?

 

Thank you.

Regards,
Jithendran S
McAfee Employee
Highlighted

Re: DLP Help Desk Help

Jump to solution

Hi Jithendran,

Thanks for your reply. I have tried doing a release this morning but still same problem. I am currently using VPN, does that make a difference? The strange thing is that Mcafee alerts me that I am in bypass mode but still does not work. I am attaching some screenshots of my settings. Thank you

OS - Windows 10

ePO - Version 5.10.0

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: DLP Help Desk Help

Jump to solution

Hi @User79252722 ,

Can you let me know the Windows OS build number or the win 10 version, like 1803 or 1903?

And also the DLP version which you have installed on the client, eg: DLP 11.4 or DLP 11.5?

And also the DLP extension version in the EPO -> Menu -> Extensions -> Data Loss prevention? 

 

Once i have these, let me try to test it once with VPN.

 

Thank you.

Regards,
Jithendran S
McAfee Employee
Highlighted

Re: DLP Help Desk Help

Jump to solution

Hi Jithendran,

Windows build number - Windows 10 Pro 1909

DLP version on client 11.5.0.602

DLP version in EPO 11.5.0.41

Thanks

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: DLP Help Desk Help

Jump to solution

Hi @User79252722 ,

Thank you for the details,

I have tested the same and there is no issue seen,

Screenshot of DLP Incident when there is no Bypass,

block.PNG

 

Screenshot of DLP Incident during the Bypass Mode,

bypass.PNG

 

I was able to copy the file to the thumb drive when DLP was in bypass mode, however, DLP's design is to monitor the copy action though its in bypass mode. 

 

Thank you.

Regards,
Jithendran S
McAfee Employee

View solution in original post

Highlighted

Re: DLP Help Desk Help

Jump to solution

Hi Jithendran,

I have tried it again and somehow it worked! I did not do any changes at all. What I noticed is that all the incidents have a delay in being recorded. Could this be an issue when I implemented it the first time? Maybe the policy did not propagate properly? Thanks

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: DLP Help Desk Help

Jump to solution

Hi @User79252722 ,

Could this be an issue when I implemented it the first time? - Could not comment any on this as we have not seen a issue with this, even i did install a new version only after your post to test it out 🙂 

Maybe the policy did not propagate properly? - If the Bypass happens, as soon as you paste the bypass response code DLP triggers a pop which shows its in Bypass mode.

If you happen to reproduce this we are happy to debug further and look into it.

 

Thank you

Regards,
Jithendran S
McAfee Employee
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community