cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Regard to DLP USB Control issue

Jump to solution
My question is if the users are out of the office and is not talking to the Mcafee Epo, will the DLP still take effect as I configure a USB block policy on the epo. Can advise thanks Mcafee On-premise Epo ePO Build: ePolicy Orchestrator 5.10.0 (Build 2428) Update Installed: Update 8 (2.0.0.929) McAfee Agent Version: 5.6.6.104
2 Solutions

Accepted Solutions

Re: Regard to DLP USB Control issue

Jump to solution

The new / modified policy just will only be activated after communication with ePO. Until then, the old rule remains in use at the endpoint.

View solution in original post

Corey-DLP
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 6

Re: Regard to DLP USB Control issue

Jump to solution

Every DLP rule has an option in the Reaction tab to make the rule react differently if the system is not connected to the corporate network (that is, if the system cannot communicate with the ePO server or an Agent Handler). By default, the "computer disconnected from corporate network" reaction is set to "react the same way as connected system", however this can be changed as desired. So, in the example of the screenshot I've attached, the rule would react the same regardless of whether the system was on the corporate network or not.

View solution in original post

5 Replies

Re: Regard to DLP USB Control issue

Jump to solution

Hi, If the user agent communicates with the epo (e.g. VPN) to download the new policy.

Re: Regard to DLP USB Control issue

Jump to solution

Hi, 

What if the user is not connected to VPN/out of office, can the DLP USB Block still take effect??

Re: Regard to DLP USB Control issue

Jump to solution

The new / modified policy just will only be activated after communication with ePO. Until then, the old rule remains in use at the endpoint.

View solution in original post

Re: Regard to DLP USB Control issue

Jump to solution

Is there a setting to set to make use of the USB block policy even when the user is out of office? 

Corey-DLP
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 6

Re: Regard to DLP USB Control issue

Jump to solution

Every DLP rule has an option in the Reaction tab to make the rule react differently if the system is not connected to the corporate network (that is, if the system cannot communicate with the ePO server or an Agent Handler). By default, the "computer disconnected from corporate network" reaction is set to "react the same way as connected system", however this can be changed as desired. So, in the example of the screenshot I've attached, the rule would react the same regardless of whether the system was on the corporate network or not.

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community