I am pretty new in the HDLP area and need some help to define a working Removable Storage Protection Rule.
I am using DLP 9.0; all handlers are enabled; a tagging rule is enabled (all zip files should be tagged with "test-tag") and applied to a user group.
I've defined a Removable storage protection rule, which should only monitor copying of tagged data. It is enabled and assigned to same user group.
However, when I copy a zip file to a USB - nothing happens....no entry is displayed in the DLP monitor.
I've successfully applied Device rules to monitor and/or block USB usage and enries in the DLP monitor appear, as expected.
Machine HDD, on which I test, is encrypted with SafeGuadr Easy; OS is WinXP
I guess I am missing something...hope someone can point it to me.
Are other protection rules ( webpost, print, email etc.) working for you?
If the issue is that only Device rules are working but no protection rules , the File Tracking might be disabled. Enable File Tracking in Agent Configuration -reboot the client and see if the files are getting tagged and the removable storage protection works then or not.