Email Protection & Application Protection Issue

[DeepakMIND]

Dear Team,

I just want to know that I am using Mozilla Thunderbird application like an email client I have to create a rule in DLP for email client in Application protection section .

Mozilla Thunderbird Evidence file is available which I upload but additional information not available.

please help on the same issue.

[sbalamur]

@DeepakMIND Thank you for choosing McAfee Support Community.

I will try to reply how i understood your issue and request you to correct me if i am wrong

You are trying to block upload through Thunderbird application which is an email client but through AFAPR . From your explanation i could able understand your requirement is met however incident manager does not have enough additional information on the file captured.

I just want to keep you informed at very beginning that Thunder Bird is not a supported as per below article
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/27000/PD27984/en_US/...

However AFAPR is a workaround for it but when you say additional information is not available i suspect this more likely to be with Incident manager as incident manager will display additional information with help of McAfee Agent so to have better understanding about the incident please share us DLPE Version & McAfee Agent Version and if possible please share Incident manager screenshot for analysis.

Please let me know if the issue is any different from my understanding!!

[DeepakMIND]

Hi,

Thank you for your response.

I have done the same process which I have seen in this video which is shared By Mcafee.

https://community.mcafee.com/t5/Documents/Mac-OS-Web-Protection-using-Application-File-Access-Protec...

If you will check Aditional information is also not available in this video.

[DeepakMIND]

Dear Team,

I have created one policy for block credit card numbers under email protection & Web Protection.

I have done all the steps & use default Classification"PCI English" as a duplicate.

I am using MS office 2016 & Chrome version 80.0.3987.116, kindly help on the same .

[jsubbura]

Hi @DeepakMIND ,

Thank you for writing in here.

Mozilla Thunderbird application email client is not supported by DLP Endpoint, not supported means we have not tested the same. 

The other post which you have mentioned is for Application File Access protection rule in MAC,

https://community.mcafee.com/t5/Documents/Mac-OS-Web-Protection-using-Application-File-Access-Protec...

Additional Information Section is usually for showing the email recipients in the Email Protection Rules and destination URL in the Web protection rules. 

Application File Access protection rule Incident will always not have Additional Information as per the design of product,

Kindly use Outlook email client or kindly use DLP Prevent for Email to get the additional information in the DLP Incident Manager for Email protection Incidents.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thank you.