Regard to DLP USB Control issue

[User95478885]

My question is if the users are out of the office and is not talking to the Mcafee Epo, will the DLP still take effect as I configure a USB block policy on the epo. Can advise thanks Mcafee On-premise Epo ePO Build: ePolicy Orchestrator 5.10.0 (Build 2428) Update Installed: Update 8 (2.0.0.929) McAfee Agent Version: 5.6.6.104

[User77161390]

Hi, If the user agent communicates with the epo (e.g. VPN) to download the new policy.

[User95478885]

Hi, 

What if the user is not connected to VPN/out of office, can the DLP USB Block still take effect??

[User77161390 · Accepted solution]

The new / modified policy just will only be activated after communication with ePO. Until then, the old rule remains in use at the endpoint.

[User95478885]

Is there a setting to set to make use of the USB block policy even when the user is out of office? 

[Corey-DLP · Accepted solution]

Every DLP rule has an option in the Reaction tab to make the rule react differently if the system is not connected to the corporate network (that is, if the system cannot communicate with the ePO server or an Agent Handler). By default, the "computer disconnected from corporate network" reaction is set to "react the same way as connected system", however this can be changed as desired. So, in the example of the screenshot I've attached, the rule would react the same regardless of whether the system was on the corporate network or not.