Application Control prevents Data Loss Prevention policy enforcement on files attached to outgoing mail

Technical Articles ID: KB89179
Last Modified: 12/18/2019

Environment

McAfee Application and Change Control (MACC) 8.0

Internet Explorer 11
Microsoft Windows

Problem

When files that contain sensitive information are attached to mail and sent through an internet mail provider (Gmail) using an internet browser (Internet Explorer 11), they are not blocked.

The DLP function to block this action does not work when MACC is installed and enabled.

Cause

MACC prevents DLP dll injection into the Internet Explorer process. Critical Address Space Protection (CASP) is not bypassed for the Internet Explorer process.

Solution

In ePolicy Orchestrator (ePO):

Start the ePO console.
Go to Policy Catalog, Application Control Rules (Windows), <policy name>, Exclusions, Memory Protection.
Add iexplore.exe as an exclusion from CASP in the Application Control Rules Policy.

On the client:

Start the command-line Interface (CLI) for Solidcore.
From the CLI prompt, run the sadmin attr add -c iexplore.exe command.

Affected Products

Application and Change Control 8.0.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Application Control prevents Data Loss Prevention policy enforcement on files attached to outgoing mail

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Application Control prevents Data Loss Prevention policy enforcement on files attached to outgoing mail

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title