search cancel

Known Issues for DLP Agent Support of Microsoft Windows 10 Creators Update

book

Article ID: 165316

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

The following table lists known issues that exist for DLP Agents running on Windows 10 Creators Update.

Refer to the "Solution" section for steps to resolve issues listed in the table.

Known issues for DLP Agents running on Windows 10 Creators Update

DLP Agent version

Windows 10 Creators Update (1703)

Windows 10 Creators Update (1709)

14.6 MP1

  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel

  • File and folder labels on the endpoint may not display when the Print/Fax monitor channel is enabled

  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel

  • Edge browser copy and paste monitoring not supported when Application Guard is enabled. Symantec recommends that you disable the copy and paste option in Windows Defender Application Guard. Refer to "Testing scenarios using Windows Defender Application Guard in your business or organization" for instructions on changing the copy and paste options.

  • Detection does not occur for Word documents saved to NTFS formatted USB drives

  • File and folder labels on the endpoint may not display when the Print/Fax monitor channel is enabled

14.6 MP2

  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel
  • File and folder labels on the endpoint may not display when the Print/Fax monitor channel is enabled
  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel

  • Edge browser copy and paste monitoring not supported when Application Guard is enabled. Symantec recommends that you disable the copy and paste option in Windows Defender Application Guard. Refer to "Testing scenarios using Windows Defender Application Guard in your business or organization" for instructions on changing the copy and paste options.

  • Detection does not occur for Word documents saved to NTFS formatted USB drives

  • File and folder labels on the endpoint may not display when the Print/Fax monitor channel is enabled

15.0

  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel
  • Edge browser monitoring not supported using the Edge (HTTPS) monitor channel

  • Edge browser copy and paste monitoring not supported when Application Guard is enabled. Symantec recommends that you disable the copy and paste option in Windows Defender Application Guard. Refer to "Testing scenarios using Windows Defender Application Guard in your business or organization" for instructions on changing the copy and paste options.

  • Detection does not occur for Word documents saved to NTFS formatted USB drives

15.0 MP1

  • None

15.1

  • None

Resolution

Monitor the Edge browser

The following steps enable the DLP agent to monitor the Edge browser.

Note: These steps do not enable the agent to monitor the Edge browser when Application Guard is enabled.

Complete the following steps to monitor the Edge browser using Application File Access monitoring:

  1. Log in to the Enforce Server administration console.
  2. Go to System > Agents > Application Monitoring and click the Microsoft Edge item.
  3. Select Application File Access in the Application File Access section.
  4. Click Save to apply your changes.
  5. Go to System > Agents > Agent Configuration and click the applicable Agent Configuration.
  6. Uncheck the Edge(HTTPS) box.
  7. Click Save to apply your changes.
  8. Click Apply Configuration.
  9. Check the box(s) for the group(s) using that Agent Configuration.
  10. Click Update Configuration button.
  11. Click OK on the Update Configuration window to confirm the change.

Display file and folder labels

To ensure that file and folder labels display, white list the FontDrvhost process. Complete the following steps to white list the FontDrvhost process:

  1. Log in to the Enforce Server administration console.
  2. Go to System > Agents > Application Monitoring.
  3. Click Add Application, Windows.
  4. Enter a descriptive title in the Name field, and enter FontDrvHost\.exe in the Binary Name field. 
  5. Confirm that no other options are selected to ensure that this item is white listed.
  6. Save your changes.