Mac HTTPS incidents should reflect the entire URL of the upload site, not just the top level domain
search cancel

Mac HTTPS incidents should reflect the entire URL of the upload site, not just the top level domain

book

Article ID: 375431

calendar_today

Updated On:

Products

Data Loss Prevention Core Package Data Loss Prevention Data Loss Prevention Endpoint Prevent Data Loss Prevention Endpoint Suite

Issue/Introduction

HTTPS incidents created by the Mac DLP agent only show the top level domain of the site the file is being uploaded to.

Steps to reproduce the issue:

  1. Log into example.com.
  2. Navigate to a repository.
  3. Note that the current URL is unique (https://example.com/repository).
  4. Upload violating content via drag and drop. 
  5. Note that the incident gets created with the generic https://example.com address, the top level domain.


Following the same steps, the incident created on a Windows endpoint will show the entire URL, not just the top level domain.

Resolution

A feature request has been submitted to add the ability of the Mac endpoint agent to return the entire URL of the upload site.
This will improve parity of the Mac agent with the Windows agent.
If you want to be added to the feature request, open a case with Support and provide them with this KB number.