Sensitive file upload from Windows 10 through Edge or Internet Explorer browsers to some file sharing sites not prevented

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Sensitive data can be uploaded from Windows 10 through Edge or Internet Explorer to select web sites, including, but not limited to, 2shared.com and hightail.com.

Cause

This issue occurs for web sites that use Flash to handle user uploads. When the HTTPS channel for a browser is enabled, the DLP Agent monitors data that the browser handles. However, the agent does not monitor the Flash application that handles uploads. 

Resolution

To ensure that file uploads that are handled by Flash are monitored, you must add Flash as a monitored application on the Application Monitoring screen.

1. Go to System > Agents > Application Monitoring.
2. Enter information about Flash in the Application Information area:
   • Enter Flash in the Application Name field
   • Enter FlashUtil_ActiveX.exe in the Binary Name field.
3. Select Generic in the Application Type list.
4. Set items to be monitored in the Application Monitoring Configuration area.
   • Network Access 
   • Application file access, Read
5. Save your changes.