For DLPe v 11, we have a data protection rule enabled under the removable storage protection field. We want to monitor and record files that are copied to AND from a thumb drive.
When I copy a test file to the thumb drive I get the notice as expected, but when I move files off of the thumb drive I do not. The policy is configured under condition for outgoing and incoming. Has anyone tested this already?