How to send email alerts for Symantec DLP Endpoint Agent Critical status

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Core Package

Issue/Introduction

You are trying to achieve 100% compliance with your Symantec Data Loss Prevention (DLP) Endpoint Agents and need to alert on any agents showing critical status due to issues with edpa or wdp services on the agent.

Environment

Release : All supported versions of DLP

Component : Endpoint Agent

Cause

DLP agent did not upgrade or install properly and agent edpa or wdp services may be stopped.

Resolution

Currently DLP does not have a feature available to send alerts or notifications when agents are showing critical status as there can be different scenarios where agent critical status is expected and not due to the agent malfunctioning in some way.

The recommendation is to check the agent overview screen where you can see all DLP agents that have a critical status or use a third party asset management tool.