Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
654 Views 1 Reply Latest reply: Jan 7, 2013 9:24 AM by dtr RSS
jontownsend Newcomer 20 posts since
Aug 9, 2011
Currently Being Moderated

Jan 3, 2013 8:16 AM

DLP 9.2 Quarantine on Local drive

Hi all,

 

I have been asked a question by a customer that I am not sure on the answer!

 

They have some protection rules in place to stop people copying certain files to USB. They have this rule set to Block and Monitor.

 

They have noticed that the local Quarantine folder is filling up with files on the clients.

 

Question is do these files stay permanently or do they get removed. Is there a way to stop files being quarantined and just blocked?

 

Many thanks

 

Jon

  • dtr Newcomer 6 posts since
    Jan 7, 2013
    Currently Being Moderated
    1. Jan 7, 2013 9:24 AM (in response to jontownsend)
    Re: DLP 9.2 Quarantine on Local drive

    Hi Jon,

     

    if you use the standard settings, the quarantained files are deleted after 30 day. If you want to change this behaviour you have to edit the global agent configuration (tab miscellaneous).

     

    The reason why the files are quarantained is:

     

    1) User copys file to USB drive

    2) DLP Agent deletes files

    3) User thinks files are stored on the USB drive

    4) User deletes files

     

    If the files are deleted from the USB drive without beeing moved to Quarantine, the files are lost.

     

     

    Regards,

     

    Dennis

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points