DLP Endpoint Prevent is only blocking files uploaded with Chrome, but not with any other web browser.

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

You have deployed Symantec Data Loss Prevention (DLP) Endpoint Prevent and sensitive data is only being blocked when uploaded with Google Chrome. Attempts to upload sensitive data with Firefox or Internet Explorer (IE) are not generating any incidents or being blocked.

 

Cause

• Your agent configuration is misconfigured.
• The web browser version installed on your DLP agent systems is unsupported.

Resolution

• Verify the browser version you are using on your DLP agents is supported by referring to the Symantec Data Loss Prevention System Requirements and Compatibility Guide
• Verify your agent configuration is properly configured and updated on your DLP agents.
  1. Log into your Enforce console.
  2. Go to System > Agents > Agent Configuration and click on your agent configuration to edit it.
  3. Verify that the following channels for the web browsers you want to monitor are checked:
     • IE (HTTPS) monitors HTTPS traffic for Internet Explorer on supported Windows endpoints
     • Edge (HTTPS) monitors HTTPS traffic for Microsoft Edge on supported Windows endpoints
     • Firefox (HTTPS) monitors HTTPS traffic for Firefox on supported Windows and Mac endpoints
     • Chrome (HTTPS) monitors HTTPS traffic for Google Chrome on supported Windows and Mac endpoints
  4. If you made any changes in step 3, then click on Save continue to step 5, otherwise click Cancel.
  5. Click on the Apply Configuration button.
  6. Check the box for the Agent Group that you need to update and click on Update Configuration.
  7. Click OK on the dialogue box that pops up.
• Verify that your DLP agents are in the correct Agent Group and have the correct Agent Configuration applied.
  1. Click on System > Agents.
  2. Click on the Total number of agents link.
  3. Search for the DLP agent systems you are having an issue with.
  4. Verify the following:
     • The agent status is OK.
     • What is listed in the Agent Group and Agent Configuration column is correct.
     • If you made any changes to the agent configuration that the Last Update Received time reflects when you made those changes and updated the agent configuration.