search cancel

Schedule an Endpoint Discover Scan in DLP

book

Article ID: 160290

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Discover Data Loss Prevention

Issue/Introduction

Can you schedule an Endpoint Discover scan in Symantec Data Loss Prevention (DLP)?

Resolution

Symantec Endpoint Discover scans CANNOT be scheduled. Each scan must be started manually by a Enforce console user. There are several reasons for this fact:

1. Endpoint Discover scans are sent to all endpoints reporting to a endpoint server. These endpoints could be scattered across the globe. A scheduled event on Discover may run at a wrong time on a endpoint somewhere else.

2. Typically Endpoint Discover is only used when administrators are needing to track a specific event or find specific data at a particular time. Endpoint Prevent is your constant real-time monitoring of activity. Thus in most cases there is no regularly planned time to be doing a scan.