Printing Protection Rules save Evidence of Office files as .txt files in Incident Manager

Technical Articles ID: KB81630
Last Modified: 2023-05-30 05:25:37 Etc/GMT

Environment

Data Loss Prevention Endpoint (DLP Endpoint) - all supported versions

Microsoft Office - all versions
Adobe Acrobat - all versions

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

When Microsoft Office files or Adobe Acrobat PDF files are saved as evidence, some of the files might be saved as .txt files in the DLP Endpoint Incident Manager.

Cause

The DLP Endpoint agent evaluates raw text that's sent to the printer. The application add-ins, which are configured in the Miscellaneous tab of the Agent Configuration, save a copy of the original file as evidence. If it can't save the original file, it saves a .txt version as evidence. In all cases, the rule will Block, Monitor, Notify-User, Request Justification, or Store Evidence as configured.

Solution

This behavior is considered normal and by design.

Affected Products

Data Loss Prevention Endpoint 11.6.x (EOL)

Languages:

This article is available in the following languages:

Knowledge Center

Printing Protection Rules save Evidence of Office files as .txt files in Incident Manager

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Printing Protection Rules save Evidence of Office files as .txt files in Incident Manager

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title