Some screen capture JPG and GIF files don't get blocked by NDLP Email Prevent
Technical Articles ID:
KB95710
Last Modified: 6/7/2022
Environment
Data Loss Prevention (DLP) Prevent 11.x
ePolicy Orchestrator (ePO) 5.10.x
Problem
Some screen capture JPG and GIF files don't get blocked by Network Data Loss Prevention (NDLP) Email Prevent.
Cause
With a default value of '1,' the text in some screen capturejpg and gif files might not be recognized correctly. A screen capture mode value of '2' is needed.
Solution
NOTES:
This issue is resolved with an updated OCR library in the NDLP 11.10 General Availability release. The updated library has an enhanced support for screen capture mode, which detects text in screen capture images.
The updated OCR library impacts the performance for analyzing screen capture files. To manage the performance impact, the default value is maintained as '1.' Change it to '2' if needed, but it might reduce the performance when scanning images.
The screen capture modes supported are as follows:
0: screen capture off
1: screen capture auto - default value
2: screen capture on - forced
Steps to configure the setting:
Log on to the appliance backed as root.
Enter the path /config/wsxmlconf/Native/scanningservice-config.xml.
Change the "ScreenCaptureMode" to '2' from the default value of '1.'
