cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

DLP Policy Configuration against MTP Devices

Jump to solution

Hi All,

I am experiencing issue with DLP 9.4. I have been added rule for DLP policy to block MTP devices. Its working fine and user getting the default block notification at the end point. But the issue is when user get chance to bypass the DLP block rule by having the challenge code, the DLP agent displaying the same block notification as before. So anyone have any resolution to prevent getting this notification at the bypass mode?

2 Solutions

Accepted Solutions

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Can anyone please help on this question??

View solution in original post

hhoang McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 8

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Did not see the response the first time around - entering bypass mode will "default" to monitor only.  In short it is expected behavior to enter bypass mode and still receive a monitor notification.  If you do not want the user to receive the notification you can temporarily assign a policy to them that has the rule disabled and/or has them added as a privileged user.

View solution in original post

7 Replies

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Can anyone please help on this question??

View solution in original post

hhoang McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 8

Re: DLP Policy Configuration against MTP Devices

Jump to solution

I'm not sure I understand the issue.  Are you saying that your users are receiving a block message after they have already entered bypass mode? 

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Hi,

After bypassing the DLP agent, pop-up shows DLP is monitoring/blocking the device

Re: DLP Policy Configuration against MTP Devices

Jump to solution

I did a presentation on McAfee last year covering DLP and HIPS

http://www.slideshare.net/KyleTaylor24/kyle-taylor-increasing-your-security-posture-using-mc-afee-ep...

take a look to see if it covers your issue.......I think the issue is that MTP mounts as a device...not Removable storage

Re: DLP Policy Configuration against MTP Devices

Jump to solution

thanks for your response on this

hhoang McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 8

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Did not see the response the first time around - entering bypass mode will "default" to monitor only.  In short it is expected behavior to enter bypass mode and still receive a monitor notification.  If you do not want the user to receive the notification you can temporarily assign a policy to them that has the rule disabled and/or has them added as a privileged user.

View solution in original post

Re: DLP Policy Configuration against MTP Devices

Jump to solution

Its done. Thank you

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community