7 Replies Latest reply on Apr 15, 2015 6:04 AM by palex

    Mcafee DLP  monitor automatic response

    kumar.raja67

      Dear Team,

       

      We have DLP policy for specific device exception on the specific container.but from my query was if any new devices connected on those container machines. As a admin i need automatic mail for the user connected not excluded devices.

       

      I have configured the automatic response in my server but i am getting the below mail as expected.but still event ID information is not displaying..But event id "19115"

       

      Kindly help me if any parameter i am missing in the configuration.

       

      Hostname: LT006678

      Event Description: Device Plug

      Event ID: {ThreatEventID}

      Threat Name: DENY ALL WPD_UHG

      Event Type: Threat

      User Name: LT006678\Vnameit


      Regards,

      Kuraj