DLP agent Not monitoring transfers to cell phone via explorer but USB thumb drives are monitor as expected.

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Customer is seeing that transfers to cell phones are not being monitored as expected.

No DIM event listed in logs for the file in question.

 

Environment

Symantec Data Loss Prevention

Cause

Advanced agent setting FileSystem.IGNORE_STORAGE_ BUS_TYPE.str was not set to the default of NONE.

Resolution

The FileSystem.IGNORE_STORAGE_ BUS_TYPE.str was configured causing transfers to the cell phones to be ignore. After setting this to NONE and applying the configuration it worked as expected.