How to configure Endpoint Discover target to scan specific fixed drives on single agent or on IP address range?

Products

• Data Loss Prevention Endpoint Discover
• Data Loss Prevention
• Data Loss Prevention Core Package
• Data Loss Prevention Discover Suite
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enforce
• Data Loss Prevention Enterprise Suite

Issue/Introduction

How to configure the Endpoint Discover target to scan particular fixed drives (partitions) on single Endpoint agent or on IP address range?

Resolution

When you set Endpoint Discover target either on single IP or IP address range for Endpoint machines. This Endpoint Discover target will scan all drives which are fixed on machine. In order for the Endpoint Discover target to scan or monitor only selected drives (partitions) on the agent, add include and exclude filters to the scan target based on drive letters.

For example, if you want to scan only D: drive you would add exclude filters for C:/* , E:/* and so on (depending on how many local drives are present on the endpoint machines).

Include Filter:  >192.168.32.0/8

Exclude Filter:  C:/*, E:/*

For more details on how to set endpoint targets refer topic Configuration options for endpoint targets in help option of DLP.