cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
nliako
Level 8
Report Inappropriate Content
Message 1 of 7

McAfee DLP Content Fingerprints and Internet Explorer.

Hello there,

I have created an application content fingerprint classification which consists of
1. a couple of applications (including browsers such as IE)
2. a specific regular expression.

This classification is then added on a screen capture protection rule.
Whilst this rule does work well with most of the apps, it doesn't work well with IE.

For example,
If i create a File with Notepad whose contents match my regular expression, and later open it up,
then any screen capture action gets blocked which is what I desire.

If I open up Internet Explorer without any web content whatsoever, and try to screen capture,
then I get blocked which is not something that I want.
What I want is to block screen capture when a file gets created/saved by Internet Explorer AND that file
contains a specific regular expression.

Any ideas are welcome.

Regards.

Labels (2)
Tags (2)
6 Replies
McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 2 of 7

Re: McAfee DLP Content Fingerprints and Internet Explorer.

1. Please share the classification  and regular expression created
2. Snapshot of the Policy.
3. Snapshot of the block in endpoint.
4. Please export the event created by screen capture in ePO under Incident Manager.

Will check if there is any configuration missing.

nliako
Level 8
Report Inappropriate Content
Message 3 of 7

Re: McAfee DLP Content Fingerprints and Internet Explorer.

nliako
Level 8
Report Inappropriate Content
Message 4 of 7

Re: McAfee DLP Content Fingerprints and Internet Explorer.

Sorry, but the photos posted are not in order.

However I think that you'll get the point.

Thanks in advance.

nliako
Level 8
Report Inappropriate Content
Message 5 of 7

Re: McAfee DLP Content Fingerprints and Internet Explorer.

Hello there.

Did you check out my photos ?

Thank you

McAfee Employee nyeshoda
McAfee Employee
Report Inappropriate Content
Message 6 of 7

Re: McAfee DLP Content Fingerprints and Internet Explorer.

Hi,

Please check the status of the IE in the application stratergy. The IE is not an editor and hence you will not get the DLP trigger for it.

Thanks,
Naveen S Y

Re: McAfee DLP Content Fingerprints and Internet Explorer.

I don't know if the below is related to your issue, or not.

One thing to note about Screen Capture Protection is it does not account for window/application focus.  If you have an application process running and content matches your classification fingerprint(tag) criteria, the rule will match, regardless of whether the application is in focus.

Based on your screenshots of the rule criteria, any application running (and set to Application Strategy "Editor") which contains the defined classification string, will cause the rule to match and Block control enacted.

MPower Badge Now Available
Customers attending MPower can earn a community badge. Check into the MPower forum and say hi to have the badge awarded to your community profile.