Blocked file shows file name with zero kb on DLP agent

Products

• Data Loss Prevention Core Package

Issue/Introduction

Customer noticed is that when attempting to use Universal Clipboard to send policy-blocked files to their personal iPhone, it will properly display the ’transfer blocked’ prompt, but will still send the file. But the file on the phone is 0KB with no content.

Environment

Mac OS

Cause

Often times an application will create an empty file and then write the data to it. The DLP agent will not stop the initial write so the file is allowed to be written, however when the data is being written the agent will then see the confidential data and stop it.

The result being a 0KB place holder file 

Resolution

If you experience this behavior please put the agent into finest logging, replicate the issue pull the logs and open a support case.

Our development team writes in code to clean up the place holder file when a block occurs, but they need to be made aware of the issue.

We need logs, and to know the name of the application being used when the issue occurred. 

Additional Information

Please note:

this is a cosmetic issue only, no data is actually escaping.