1 Reply Latest reply on May 22, 2014 12:05 PM by Peter M

    removable storage device rule and EEFF how to identify which rule is being applied


      We are on EPO 4.6.6

      Mcafee agent

      Mcafee DLP Endpoint 9.3.200

      Mcafee EEFF



      I am having some issue and I am new to Mcafee DLP and EEFF. The policies are litlle complex as we are 80000 user company.

      I am trying to find how the agent applies a certain removable storage device rule and EEFF rule and which AD group it's taking the precedence as there are nested groups in some occasions which might be causing issues.



      1) Is there a way to get this info through debug on client side.

      I have seen this article https://kc.mcafee.com/corporate/index?page=content&id=KB54645 but I can't see any file AgentLogicLog.txt

      I have turned the debug on for this client using this article https://kc.mcafee.com/corporate/index?page=content&id=KB77803 but again the logs are not telling me what policy is being enforce and groups etc. or maybe I am not looking at the right info.



      2) I want to do the same for EEFF also. How can one put the agent in extra logging or debug mode as I can't find this info? Also find which policy and groups are taking over as I have couple of  if member of and not member of in EEFF policies. Although the policy is force encryption and the test user is getting No force encryption.



      3)  Are there any issues with Mcafee DLP and EEFF nested groups. I have got large group that contains 45000 users and the groups are nested. so the groups are like this for example.

      building->site->department-> country -> region i have used the region group.



      Appreciate your help.