search cancel

Incidents display com.apple.WebKit.Plugin.64 or com.apple.WebKit.Plugin.32 for the application name instead of Safari(Mac)

book

Article ID: 163299

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

Some incidents generated in Safari display the application name as com.apple.WebKit.Plugin.64 or com.apple.WebKit.Plugin.32 instead of Safari(Mac).

Cause

The DLP Agent monitors file uploads through Safari to websites that use plug-ins like Silverlight and Flash. If sensitive data is identified, the DLP Agent logs incidents using the XPC service name (either com.apple.WebKit.Plugin.64 or com.apple.WebKit.Plugin.32) instead of Safari (Safari[Mac]).

Resolution

None.