Outlook monitoring issues for endpoint users working offline

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce
• Data Loss Prevention
• Data Loss Prevention Core Package
• Data Loss Prevention Endpoint Suite
• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Plus Suite

Issue/Introduction

If a user is working offline in Outlook and user details are not cached on the monitored endpoint the following may occur:

• Policies with Sender/User Pattern specified may not monitor Outlook
• Generated incidents (by policies other than those with Sender/User Pattern specified) display the sender email id as "Distinguished User Name" instead of the actual "Email-id."

This behavior may occur in all versions of Outlook clients including Outlook 2013.

Resolution

Cache user details on the endpoint.