Protection Rule blocks application even if further actions don't violate rule settings

Technical Articles ID: KB83757
Last Modified: 2023-05-30 02:59:30 Etc/GMT

Environment

Data Loss Prevention Endpoint (DLP Endpoint) - all supported versions

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

Protection rules are enforced on a client and a block action occurs. The protection rules might be Network Communication, Screen Capture, or Clipboard.

All further actions that use the offending application are blocked. These actions are blocked even if the action doesn't violate the settings of the protection rule.

Solution

DLP Endpoint is operating as designed. The protection rule action block acts on the Process ID (PID) of the offending application. It doesn't release it until the process, as defined by its PID in the Task Manager, is stopped and restarted.

Workaround

Restart the application and make sure that the PID changes for this action. Or, end the task on the offending application's PID using Task Manager.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Protection Rule blocks application even if further actions don't violate rule settings

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Protection Rule blocks application even if further actions don't violate rule settings

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title