Thursday, September 8, 2016

KB83810 - Data Loss Prevention Endpoint 9.3/9.4 event codes for ePolicy Orchestrator 5.x

Data Loss Prevention Endpoint 9.3/9.4 event codes for ePolicy Orchestrator 5.x

Environment

McAfee ePolicy Orchestrator (ePO) 5.x
McAfee Data Loss Prevention Endpoint (DLP Endpoint) 9.3.x, 9.4

Summary

Use the following list of Event IDs to configure DLP Endpoint 9.3/9.4 event notifications in ePO 5.x:

DLPe 9.3.xDLPe 9.4.x
Event IDDescriptionDescription
19100Policy Changed (Info)Policy Changed (Info)
19101Agent Installed (Info)Agent Installed (Info)
19102Agent Enters Bypass Mode (Info)Agent Enters Bypass Mode (Info)
19103Agent Leaves Bypass Mode (Info)Agent Leaves Bypass Mode (Info)
19104User Logged Into Safe Mode (Info)User Logged Into Safe Mode (Info)
19105Evidence Replication Failed (Info)Evidence Replication Failed (Info)
19106Application File Access Protection (Info)Application File Access Protection (Info)
19107File System Discovery (Info)File System Discovery (Info)
19108Email Protection (Info)Email Protection (Info)
19109File System Protection (Info)Network Share Protection (Info)
19110Network Communication Protection (Info)Network Communication Protection (Info)
19111Printing Protection (Info)Printing Protection (Info)
19112Removable Storage Protection (Info)Removable Storage Protection (Info)
19113Screen Capture Protection (Info)Screen Capture Protection (Info)
19114Web Post Protection (Info)Web Post Protection (Info)
19115Device Plug (Info)Device Plug (Info)
19116Device Unplug (Info)N/A
19117N/ANew Device Class Found (Info)
19118N/AFile Released from Quarantine (Info)
19119DRM Failure (Info)DRM Failure (Info)
19120N/AEmail Storage Discovery (Info)
19121User has tried to disable outlook plug-in (Info)User has tried to disable outlook plug-in (Info)
19122Outlook plug-in was added to disabled items (Info)Outlook plug-in was added to disabled items (Info)
19123Release Code Locked (Info)Release Code Locked (Info)
19124Automatic Dump Created (Info)Automatic Dump Created (Info)
19125Agent Exceeded Memory Limit On Load (Info)Agent Exceeded Memory Limit on Load (Info)
19126Discovery Summary Report (Info)Discovery Summary Report (Info)
19127Clipboard Protection (Info)Clipboard Protection (Info)
19128Policy Applied (Info)Policy Applied (Info)
19129Agent Up (Info)Agent Up (Info)
19130Agent Down (Info)Agent Down (Info)
19131Agent Uninstall Key Generated (Info)Agent Uninstall Key Generated (Info)
19132Agent Quarantine Release Key Generated (Info)Agent Quarantine Release Key Generated (Info)
19133Agent Override Key Generated (Info)Agent Override Key Generated (Info)
19134Cloud Protection (Info)Cloud Protection (Info)
19135N/AWrong Driver Version (Info)
19170N/ANetwork Discover File Information (Info)
19171N/ANetwork Discover Incident (Info)



- wong chee tat :)

No comments: