Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
2337 Views 6 Replies Latest reply: May 7, 2013 9:40 PM by tonyw RSS
al12345 Newcomer 2 posts since
Feb 6, 2013
Currently Being Moderated

Feb 6, 2013 2:51 AM

DLP Internet Explorer Plugin

Hi,

 

I have DLP 9.2 installed (epo4.6) and I believe that the DLP internet explorer plugin is affecting how one of our intranet sites loads. (in IE9).

 

Does anyone know where I can manage this (or make it so it is not installed to our users?)

 

I don't have any content classifications set within DLP (I only use it for removable media) so I don't need this installed.

 

Many thanks,

Alastair.

  • keithdrone Apprentice 56 posts since
    Jan 28, 2013
    Currently Being Moderated
    1. Feb 6, 2013 1:32 PM (in response to al12345)
    Re: DLP Internet Explorer Plugin

    Depending on how your policies are set up, you can check the following.

     

    If you are not running that protection set, you can disable it from multiple avenues.  The best being your Global Agent Configuration (either from your EPO policy tree filtered by DLP, or from within the EPO>DLP interface itself - one of these may override the other though depending on your policy setup).

     

    Simply find the tab (usually Miscillanous) with available modules and de-select the Internet Explorer module.

     

    Additionally, your application rules can be set to exclude browsers.  You can also de-select which policy sets will apply to your user groups from within that area (user groups > click edit,> policies)

  • keithdrone Apprentice 56 posts since
    Jan 28, 2013
    Currently Being Moderated
    3. Feb 7, 2013 8:32 AM (in response to al12345)
    Re: DLP Internet Explorer Plugin

    Looks like you are missing some handlers/extensions.  Are you running at least Agent v4.5 ?

     

    You may need to check within EPO that you have it properly installed.

     

    Additionally, a new patch (9.2 Patch2) has been released for DLP 9.2, it appears to be a recommended update.  Installing this may include some of the missing agent capabilities.

     

    You should definately call support - and when you do, you'll probably need the Agent Diagnostics Tool, to verify which policies and rules are applied on your endpoints.

    https://kc.mcafee.com/corporate/index?page=content&id=KB75040&cat=CORP_DATA_LOSS _PREVENTION_HOST&actp=LIST

     

     

    Are you accessing the global policy from your DLP interface, or from your EPO Policy Catalog (it has the same DLP agent configuration interface, but it can over-ride the settings on the DLP-interface)

  • trevorw2000 Apprentice 49 posts since
    Sep 25, 2012
    Currently Being Moderated
    4. Apr 26, 2013 11:50 AM (in response to keithdrone)
    Re: DLP Internet Explorer Plugin

    I don't have this option either.  Could this be a difference between full-blown DLP and Device Control?  We're really only using Device Control and would like that component disabled as well.

  • virgona Newcomer 27 posts since
    Apr 14, 2013
    Currently Being Moderated
    5. Apr 28, 2013 3:57 AM (in response to trevorw2000)
    Re: DLP Internet Explorer Plugin

    The setting page looks like this. It is not global setting from ''DLP Policy", it is from "System Tree" -> "Assigned Policies", select the group the click the "Agent Configuration" policy name.

    DLP_Misc.JPG

    I am not sure why yours looks not like above, one clue is the tabs on your pic are less then mine. I tried to change some settings on my side, like "DLP Operation Mode", revelant thing in "Permission Sets", could not rebuild your result. I don't know if it is license related. You can check this by install a test server without real license added.

     

    Message was edited by: virgona on 4/28/13 4:57:55 PM CST
  • tonyw McAfee Employee 159 posts since
    May 9, 2011
    Currently Being Moderated
    6. May 7, 2013 9:40 PM (in response to trevorw2000)
    Re: DLP Internet Explorer Plugin

    That is correct.  DLP provides the options in virgona's screenshot, Device Control licensing provides the options in al12345's screenshot.

     

    DLPE version 9.2.2 introduced an option to install with no plugins enabled.  That should resolve any issue you have with disabling the module.  From the release notes:

     

    Installation without plug-ins

    An optional Command line entry in the ePolicy Orchestrator client task, or the argument PLUGINS=0 in the

    command line in manual installation, installs the McAfee DLP Endpoint client without plug-ins.

     

    http://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/2 4000/PD24280/en_US/McAfee_DLP_9_2_200_RTW.pdf

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points