The host of Evidence and Whitelist shared folders experience traffic on port 445 from endpoints

Technical Articles ID: KB90025
Last Modified: 2023-05-26 06:08:08 Etc/GMT

Environment

Data Loss Prevention (DLP) Endpoint - all supported versions

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

The host of the Evidence and Whitelist shared folders experiences many connections made on port 445 by DLP Endpoint client systems.

Cause

The Data Protection Rule is triggered on the endpoints. The rule causes the Evidence and Whitelist shared folders' host connections to be established. After the connections are established, the clients upload files to the shared folders. These files are the Evidence files, Whitelist files, or both.

Solution

This behavior is considered normal and by design. For more information, see Network Ports Used by Key Microsoft Server Products.

Affected Products

Data Loss Prevention Endpoint 11.6.x (EOL)

Languages:

This article is available in the following languages:

Knowledge Center

The host of Evidence and Whitelist shared folders experience traffic on port 445 from endpoints

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

The host of Evidence and Whitelist shared folders experience traffic on port 445 from endpoints

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title