Mac HTTPS incidents should reflect the entire URL of the upload site, not just the top level domain
book
Article ID: 375431
calendar_today
Updated On:
Products
Data Loss Prevention Core PackageData Loss PreventionData Loss Prevention Endpoint PreventData Loss Prevention Endpoint Suite
Issue/Introduction
HTTPS incidents created by the Mac DLP agent only show the top level domain of the site the file is being uploaded to.
Steps to reproduce the issue:
Log into example.com.
Navigate to a repository.
Note that the current URL is unique (https://example.com/repository).
Upload violating content via drag and drop.
Note that the incident gets created with the generic https://example.com address, the top level domain.
Following the same steps, the incident created on a Windows endpoint will show the entire URL, not just the top level domain.
Resolution
A feature request has been submitted to add the ability of the Mac endpoint agent to return the entire URL of the upload site. This will improve parity of the Mac agent with the Windows agent. If you want to be added to the feature request, open a case with Support and provide them with this KB number.