DLP for Printers

[User16789]

Hi Guys,

 

We have installed symantec dlp on our network but we are wondering if it can monitor documents that have been sent to the printer.

 

If so, how can we configure it through the DLP portal?

 

Many thanks

[Fady azab]

Hi If you have installed the DLP agent , you can create a policy with a rule endpoint protocol monitoring and check box on the printing protocol. If you are talking about network monitor , the network monitor should took the traffic from switch that passes through it the traffic betweeen the machines and the network printer Regards

[Fady azab]

Hi If you have installed the DLP agent , you can create a policy with a rule endpoint protocol monitoring and check box on the printing protocol. If you are talking about network monitor , the network monitor should took the traffic from switch that passes through it the traffic betweeen the machines and the network printer Regards

[James Vu]

Would you mind diving into some of the potential limitations of this from the point of detection?

[User16789]

Hi Guys,

 

I have created the policy for Printing and made it active. However, for some reason the DLP agent is not picking up the changes. I have done a gpupdate however still no result.

 

Any ideas please?

[Matt Ehrhart]

Hi User16789

 

1)  Is the DLP agent reporting back to the DLP Enforce Console and active?

2)  Are the endpoint services running on the host machine?  (check to make sure "EDP" and "WDPA" are running)

3)  Ensure your agent configuration as "Printer/Fax" checked (supported on Windows endpoints only)

4)  Ensure your Endpoint policy has a Endpoint Destination checked for "Printer/Fax" checked

5)  Do you have an "Agent Group" created?  (guessing this is probably the case)

[User16789]

Hi Matt,

1) DLP agent is reporting back to the console and is active. Other policies in place are flagging when breached and notifying the console.

2) EDPA and WDP are running

3) Printer/Fax was not ticked in agent configuration. The option is now ticked.

4) Protocol and Endpoint Monitoring is ticked within the policy

5) Yes, we have created an Agent group for domain users

[Matt Ehrhart]

for #3, after you ticked, did you try again?  Curious if that helped