Cisco Security Agent is incompatible with DLP Endpoint Agent
Last Updated May 22, 2019
The Symantec Data Loss Prevention (DLP) Endpoint Agent Clipboard Monitoring and Print Monitoring functions will not work when the Cisco Security Agent v6.0 is installed on the system.
The Cisco CSA agent process, CUI.exe crashes
The DLP agent is not functioning properly.
The DLP Endpoint agent and the CSA agent use the same detouring mechanism to intercept API calls and are not compatible.
Exclude the DLP agent from the Cisco CSA agent.
Note: If further assistance is needed with the following steps, please contact the Cisco CSA agent vendor.
1. Launch CSA console. 2. From the drop-down menu above select, Configuration->Application->Application Classes. 3. Select Administrator Defined - White List Application. 4. In the group box window titled - "Add process to application class" select the variable "$Administrator defined - White List files [V6.0 r205]". Note: double-clicking it will launch a new window. 5. In the group box window titled - "Configuration" go to "Directory matching" enter "@program_files\**\Manufacturer\Endpoint Agent\*" where, @program_files is a variable which would be expanded to the program files path. (This should be the path where the DLP Agent is installed.) 6. Under files matching enter the name of the .exe files to be excluded. 7. Click Save. 8. Click Generate Rules->Generate. (This will push the configuration to the CSA Agent.)