Como solucionar problemas de configurações de "modos de operação e módulos operacionais" baseados na configuração de cliente

You can use the Windows client configuration policy "Operational Modes and Modules" settings to perform a high-level test for subsets of rules. The subsets include type, module isolation, interactions with third-parties, potential limitations, or other unexpected behaviors with DLP Endpoint Agent data-protection modules.

DLP Endpoint contains many modules and tuning parameters in addition to the rules policy. When you find an unexpected behavior, McAfee recommends that you review this article before you contact Technical Support. This information might lead to a resolution, or enhance your initial question to expedite your time spent with Technical Support.

This article assumes that the unwanted symptom exists when using Operational Mode with "full content protection" in the Windows client configuration. When possible, perform these tests on a Windows client configuration policy that is assigned only to one test system or a small pilot group that exhibits the symptom.

Click to expand the step that you need to follow:

Step 1—Test for symptoms in Device Control Only mode

Perform the following steps:

Log on to the ePO console.
Navigate to the policy Windows Client Configuration.
Select the Operational Modes and Modules settings.
Select the Device Control Only option.
Apply the policy.
Wake up the McAfee Agent on the managed test system.
Ensure that the new policy revision is applied in the DLP UI Management Console in the McAfee tray icon.
Restart the system.

If the symptom still exists, review KB86007 - How to block all USB drives and set exclusions for information about how to block all USB drives and set exclusions.

If you still have this issue, stop following the steps in this article. Collect the Minimum Escalation Requirements (MER) data, contact Technical Support, and mention that Device Control Only mode has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur in Device Control Only mode, continue to step 2 below.

Step 2—Test for symptoms in Device Control and content aware removable storage protection

Perform the following steps:

Log on to the ePO console.
Navigate to the policy Windows Client Configuration.
Select the Operational Modes and Modules settings.
Select the Device Control and Content Aware Removable Storage Protection option.
Apply the policy.
Wake up the McAfee Agent on the managed test system.
Make sure that the new policy revision is applied in the DLP UI Management Console in the McAfee tray icon.
Restart the system.

If the symptom still exists, see KB81640 - Data Loss Protection Endpoint Protection rule is triggering on a document that has been unexpectedly tagged. This KB include information about a DLP Endpoint Protection rule that triggers on a document that has been unexpectedly tagged.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that Device Control and content aware removable storage protection mode has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur in Device Control and content aware removable storage protection, continue to step 3 below.

Step 3—Test for symptoms in Device Control and full content protection

Perform the following steps:

Log on to the ePO console.
Navigate to the policy Windows Client Configuration.
Select the Operational Modes and Modules settings.
Select the Device Control and Full Content Protection option.
Under Data Protection Modules, deselect the following:
- Clipboard Service
- Cloud Protection Handlers
- Discovery
- Browsers
- Lotus Notes Plug-in (* multiuser installation only)
- Manual Classification User Interface
- Network Communication Driver
- Outlook Add-ins (**)
- Printing Handler
- Digital Rights Management Modules
- Screen Capture Service
- Applications File Access
- Browser Address Bar URL detection.
Apply the policy.
Wake up the McAfee Agent on the managed test system.
Make sure that the new policy revision is applied in the DLP UI Management Console in the McAfee tray icon.
Restart the system.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that Device Control and full content protection with the above modules deselected has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur in Device Control and full content protection with the Data Protection modules deselected, continue to the "Troubleshoot Modules" section below to determine which module has the issue.

Troubleshoot Modules
If the issue did not occur when you followed steps 1–3 above, click to expand the modules in the order below to continue troubleshooting:

Clipboard Service

If the symptom did not occur in Device Control and Full Content Protection with the modules listed in step 3 above deselected, do the following:

Enable the Clipboard Service.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following articles:

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Clipboard module has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with the Clipboard Service enabled, continue to Cloud Protection Handlers below.

Cloud Protection Handlers

If the symptom did not occur in the Clipboard Service module, do the following:

Enable the Cloud Protection Handlers module.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Cloud Protection Handlers module has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Cloud Protection Handlers enabled, continue to Discovery modules below.

Discovery modules

If the symptom did not occur in the Cloud Protection Handlers module, do the following:

Enable the Discovery modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Discovery modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Discovery modules enabled, continue to Browsers modules below.

Browsers modules

If the symptom did not occur in the Discovery modules, do the following:

Enable the Browsers modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following articles:

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Browsers modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Browsers modules enabled, continue to Lotus Notes modules below.

Lotus Notes modules

If the symptom did not occur in the Browsers modules, do the following:

Enable the Lotus Notes modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review article KB89301 - Data Loss Prevention 11.x.x Known Issues.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Lotus Notes modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Lotus Notes modules enabled, continue to Manual Classification modules below.

Manual Classification modules

If the symptom did not occur in the Lotus Notes modules, do the following:

Enable the Manual Classification modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Manual Classification modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Manual Classification modules enabled, continue to Network Communication module below.

Network Communication module

If the symptom did not occur in the Manual Classification modules, do the following:

Enable the Network Communication module.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review article KB78874 - Data Loss Prevention Endpoint Network Communication Protection rule does not work if McAfee Client Proxy is installed.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Network Communication module has the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Network Communication module enabled, continue to Outlook modules below.

Outlook modules

If the symptom did not occur in the Network Communication module, do the following:

Enable the Outlook modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following article KB86696 - When sending an email attachment in Outlook, a file with a deleted tag is retagged on the email recipient's computer.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Outlook modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Outlook modules enabled, continue to Printing modules below.

Printing modules

If the symptom did not occur in the in Outlook modules, do the following:

Enable the Printing modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following articles:

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Printing modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Printing modules enabled, continue to Digital Rights Management modules below.

Digital Rights Management modules

If the symptom did not occur in the Printing modules, do the following:

Enable the Digital Rights Management modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following article KB89301 - Data Loss Prevention 11.x.x Known Issues.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Digital Rights Management modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Digital Rights Management modules enabled, continue to Screen Capture Service modules below.

Screen Capture Service modules

If the symptom did not occur in the Digital Rights Management modules, do the following:

Enable the Screen Capture Service modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following articles:

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Screen Capture Service modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Screen Capture Service modules enabled, continue to Application File Access modules below.

Application File Access modules

If the symptom did not occur in the Screen Capture modules, do the following:

Enable the Application File Access modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Application File Access modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

If the symptom does not occur with Application File Access modules enabled, continue to Browser Address Bar URL Detection modules below.

Browser Address Bar URL Detection modules

If the symptom did not occur in the Application File Access modules, do the following:

Enable the Browser Address Bar URL Detection modules.
Apply the policy.
Wake up the McAfee Agent.
Test the issue.

If the symptom still exists, review the following article KB90297 - REGISTERED - High CPU usage experienced, when using some internet browsers, on systems with Data Loss Prevention Endpoint installed.
NOTE: The referenced content is available only to logged in ServicePortal users. To view the content, click the link and log in when prompted.
If you still have this issue, stop following the steps in this article. Collect the MER data, contact Technical Support, and mention that the Browser Address Bar URL Detection modules have the issue. For information about how to collect MER data and contact Technical Support, see the Related Information section of this article.

Knowledge Center

How to troubleshoot client configuration-based "Operational Modes and Modules" settings

Ambiente

Resumo

Informações relacionadas

Produtos afetados

Idiomas:

Glossário de termos técnicos

Title

Title

Knowledge Center

How to troubleshoot client configuration-based "Operational Modes and Modules" settings

Ambiente

Resumo

Informações relacionadas

Produtos afetados

Idiomas:

Glossário de termos técnicos

Escolha a sua região

Title

Title