search cancel

New DLP Service with Endpoint Agents

book

Article ID: 223702

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention

Issue/Introduction

A new windows service is getting installed with DLP named "Symantec Endpoint Data Loss Prevention LiveUpdate"

This seems to be different from the versions earlier to 15.5.

Cause

It is an integral part of the agent, we cannot skip the installation of the LiveUpdate service. if the LiveUpdate feature is disabled from the Enforce then the service is disabled by default.

Environment

15.7 and later

Resolution

New service getting installed with DLP agent starting 15.7.

If the LiveUpdate feature is enabled, the EDPA component will enable and start the new service "Symantec Endpoint Data Loss Prevention LiveUpdate" with startup type Automatic. Else it will be in a stoped and kept in the disabled state.

The EDPA component will notify the LiveUpdate service of a new configuration. it is by design if the LiveUpdate feature is disabled from the Enforce then the service will be in disabled mode and will not impact anything.

If you are not interested in LiveUpdate, keep it disabled and the service won't run.