How to add an exception to allow files to be copied or saved to a specific folder / directory

book

Article ID: 170238

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

At times you may want to allow for policies to not monitor a specific folder for DLP endpoint detection. For example a specific UNC network share / folder that anyone in HR is allowed to save files to.

Environment

14.x
15.x

Resolution

Because there is not a specific exception to add to a policy for file path this needs to be handled by the agent configuration. To do this, edit the agent configuration then add a monitoring filter. Set the filter to ignore then check the applicable channels for your environment. Then enter the file path that you want to allow users to write to.

Save the monitor filter. Adjust the filter order as needed then save the configuration and apply the configuration to the applicable agent groups.