New DLP Service with Endpoint Agents

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

A new windows service is getting installed with DLP named "Symantec Endpoint Data Loss Prevention LiveUpdate"

This seems to be different from the versions earlier to 15.5.

Environment

15.7 and later

Cause

It is an integral part of the agent, we cannot skip the installation of the LiveUpdate service. if the LiveUpdate feature is disabled from the Enforce then the service is disabled by default.

Resolution

New service getting installed with DLP agent starting 15.7.

If the LiveUpdate feature is enabled, the EDPA component will enable and start the new service "Symantec Endpoint Data Loss Prevention LiveUpdate" with startup type Automatic. Else it will be in a stoped and kept in the disabled state.

The EDPA component will notify the LiveUpdate service of a new configuration. it is by design if the LiveUpdate feature is disabled from the Enforce then the service will be in disabled mode and will not impact anything.

If you are not interested in LiveUpdate, keep it disabled and the service won't run.