DLP reading files?

[mlajoie]

Good morning.  My windows update team is having issues getting updates, as well as application installations, to happen consistently.  Their installer writes a log file and the installer will error out because that log file will be unavailable.

Running a procmon, I can see that FCAG.EXE is all over the place (I have ENS disabled) with the installer.  When I put DLP into bypass mode, it works with no problems.  I'm pretty sure I've isolated the issue to DLP.  Now.  Why is it doing this?  I have no idea and I'm hoping someone can point me in the right direction.

We are running DLP 11.3.  We are only supposed to be using DLP for controlling access to removable media (including optical), Bluetooth, phones, scanners, etc. We are not doing DLP content.

Any help would be *greatly* appreciated.

Thanks a lot in advance!

[mlajoie · Accepted solution]

In case someone else has this issue ....

We are using DLP for device control. We had the Windows Client Configuration policy Operational Mode set to "Device Control and content aware removable storage protection (without tag support)". By using this mode, DLP will still scan files. Support recommended setting it to "Device Control only".

[jsubbura]

Thank you for sharing the answer and update in here 🙂 

[ISmith]

Wouldn't this effect how DLP analyzes content during Removable Media writes?