Dear friends I am new to McAfee DLP and want to write a simple rule to prevent uploading pdf file extension and also a keyword both by web protection rule set. I used default rule and created a new rule set. In web protection, I did the necessary changes includes adding classification and response actions. In classification in added a keyword criteria and also a file extension criteria. Finally applied changes (apply configuration) and ensured that the agent has received new revision. The issue is that typing the keyword to the dlp test website in firefox browser not detected nor prevented while it is detected but not prevented when typed in Chrome browser. The second issue is that pdf file extension not detected nor prevented in both browsers. I used classification tester to test created classification criteria. Keywords works fine but browsing a pdf file won’t count and detect anything. I also tried different methods by adding different criteria including file extension, true file type, file extension through file information but none of them works. As a final test I used file name and unfortunately it didn’t work too. I checked the instruction found in a video in YouTube showing configuration is done correctly but no results. Thanks in advance for your attention.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.