DLP Agent incorrectly excluding .xls files from detection

Products

• Data Loss Prevention Enterprise Suite

Issue/Introduction

.xls files are not being blocked via the Endpoint Agent, however all other similar test files (.docx, .xlsx, .pdf, .csv) were all reliably detected.

Agent log shows the xls file is matching a filter in the configuration however no exclusion for xls files are configured in the agent configuration.

Environment

Release : 15.8 HF 11

Component : Default-Sym

Cause

There is an ignore filter for .db which shares the same file signature as .xls

Resolution

Create a rule to monitor *.xls. and assign an order number above the rule to ignore *.db.