0 Replies Latest reply: May 22, 2014 12:03 PM by k_bashir RSS

    removable storage device rule and EEFF how to identify which rule is being applied

    k_bashir

      We are on EPO 4.6.6

      Mcafee agent 4.8.0.1500

      Mcafee DLP Endpoint 9.3.200

      Mcafee EEFF 4.2.0.164

       

       

      I am having some issue and I am new to Mcafee DLP and EEFF. The policies are litlle complex as we are 80000 user company.

      I am trying to find how the agent applies a certain removable storage device rule and EEFF rule and which AD group it's taking the precedence as there are nested groups in some occasions which might be causing issues.

       

       

      1) Is there a way to get this info through debug on client side.

      I have seen this article https://kc.mcafee.com/corporate/index?page=content&id=KB54645 but I can't see any file AgentLogicLog.txt

      I have turned the debug on for this client using this article https://kc.mcafee.com/corporate/index?page=content&id=KB77803 but again the logs are not telling me what policy is being enforce and groups etc. or maybe I am not looking at the right info.

       

       

      2) I want to do the same for EEFF also. How can one put the agent in extra logging or debug mode as I can't find this info? Also find which policy and groups are taking over as I have couple of  if member of and not member of in EEFF policies. Although the policy is force encryption and the test user is getting No force encryption.

       

       

      3)  Are there any issues with Mcafee DLP and EEFF nested groups. I have got large group that contains 45000 users and the groups are nested. so the groups are like this for example.

      building->site->department-> country -> region i have used the region group.

       

       

      Appreciate your help.

      Thanks

      Message was edited by: k_bashir on 22/05/14 12:01:13 CDT

       

      Message was edited by: k_bashir on 22/05/14 12:03:13 CDT