DLP Policies not applying to agents

[bph]

We are currently trying to implement some DLP policies but having issues getting them to be picked up by the DLP agent. 

I have DLP for Endpoint 9.3.200.23 installed on my local PC; under the DLP Endpoint Console Policy and Endpoint Configuration are both showing as last modification as July 1st 2014 (I believe this was when it was initially setup).  The Computer Assignment Group is blank.  Under Discovery, both Email Storage and Local File System are showing as not configured.

My local agent can communicate ok with the ePO server and under DLP User sessions, the server is acknowledging that Policy is currently enforced and the Agent is running.

I have setup and applied the DLP Policy (blocking IM Applications) - this is confirmed under DLP Operational Events.

The Policy Catalog for DLP is set to Default Agent Config and Default Computers Assignment (both covering the Global Root - we are only a small company so this isn't a huge amount)

I have restarted my PC/reinstalled the client and manually Checked for New Policies in the Agent Monitor (states "No package received from ePO server").  The policy still does not seem to update on my local DLP agent.

Am I missing something basic?  I downloaded the User Guide for DLP and have followed the steps as far as I can tell.  I've checked on other PCs and have the same issue.

Happy to provide any further information.

ePO Build: ePolicy Orchestrator 5.0.0 (Build: 1160)

[palex]

Hi, bph!

1. Make DLP Policy (into epo go to Menu-Data Protection-DLP Policy).

2. You can do User Groups into DLP Policy and choose this groups into Protection Rule in the last step everybody rule

3. or you can make you Computers Assignment Group into Menu-Policy-Policy Catalog:

Chooce Product : Data Loss Prevention... and Duplicate "McAfee Default Computers Assignment Group".

Go to System Tree Assigned Policies Tab product Data Loss Prevention - Computers Assignment Group end in Actions click Edit Assignment.

Chose You Computers Assignment Group - in the Assigned Policies Tab in Policy Computers Assignment Group will be changed.

Click to the name of you Computers Assignment Group and check Logged in User or/and Local User. Save.

4. And update you policy.

Regards.

[bph]

Thanks for the quick response!  Unfortunately I still cannot get it to work.

I have created a brand new policy and have applied it to everybody (I have also tried applying it just to myself) - still this is not being picked up.

I then duplicated the Default Computer Assignment Group, edited the Assignment and selected both Logged In and Local Users.  This has been saved and policies have been reapplied - still not passing on.

To update the policy on my local machine, I'm just going to the Agent Monitor and selecting "Check New Policies".  I've also reinstalled the DLP agent  and updated the Management Tools in ePO.

It's likely something very simple I'm missing but I cannot see what I'm doing wrong. 

[dumitru-alexeev]

Hi,

You assigned the policy to some user (local user or from Active Directory)  ?

[bph]

I have assigned it to myself and then in another test, to our all user group - both through Active Directory.

[dumitru-alexeev]

See in DLP Policy | Agent Configuration | Miscellaneus, if all modules is Enable.

[bph]

All modules are ticked and enabled in the Agent Configuration.

[dumitru-alexeev]

You have to download McAfee Agent DLPe DiagTool, and take a snapshot.

[sathish.l]

Do you have any other point product installed on the client ?

Is it happening only for DLP ?

Can you check with below KB ?

McAfee KnowledgeBase - ePO 5.0 servers installed with valid license key stop sending policies and ta...

[jhall2 · Accepted solution]

The best way to troubleshoot policy enforcement issues is with the DLP Diag Tool. This will show you what modules are enabled and what policies are being applied.

Note: ePO 5.0.0 has gone End of Life. I highly recommend upgrading ePO to a supported version.

McAfee Product and Technology Support Lifecycle - Software & Utilities | McAfee Support