This article goes over how to install and configure a DLP Agent FlexResponse plugin.
The following must be configured when using the DLP Flex Response Plug-in:
Install Symantec DLP Agents on the endpoint computers before deploying Endpoint FlexResponse plug-ins. The Agents must be connected to an active Endpoint Server.
Deploy the Endpoint FlexResponse plug-ins on each endpoint computer where you require Endpoint FlexResponse actions. You can use a manual installation or a silent installation method to deploy the plug-in. Silent installation methods involves using systems management software (SMS), to distribute and install software on all of your endpoint computers.
Install the Endpoint FlexResponse utility (flrinst.exe) on each endpoint computer where you will deploy Endpoint FlexResponse plug-ins.
Make the Endpoint FlexResponse package ( a .zip file) available to each endpoint computer. You can copy the package to each endpoint computer, or you can make the package available on a network drive that is accessible by all endpoint computers. Example: The Symantec Endpoint Encryption Removable Media Encryption zip package is called "EERPlugin_flexresponse.zip". These zip files contain logic to install properly using the flex response plugin (flrinst.exe).
For deploying the plug-in, use the command-line options of the Endpoint FlexResponse utility when creating your installation scripts.
Remove the Endpoint FlexResponse utility after deploying your plug-in. If you leave the utility installed on the endpoint computers, a malicious user could use the utility to uninstall or alter your Endpoint FlexResponse plug-in
Steps required to deploy and use the Flex Response Plug-in:
Copy the Endpoint FlexResponse plug-in utility (flrinst.exe) to your endpoint computers.
Enable Endpoint FlexResponse on the Enforce Server.
Deploy the specific Endpoint FlexResponse plug-in (such as the EERPlugin_flexresponse.zip) using the Endpoint FlexResponse utility (flrinst.exe).
Create the response rules that use Endpoint: FlexResponse actions that reference the plug-in, and add these rules to an active policy
The Endpoint FlexResponse utility (flrinst.exe) must be run from the folder where the Symantec DLP Agent is deployed. The location of this folder is configurable, however, by default is located in the following directory:
c:\Program Files\Manufacturer\Endpoint Agent\
The Flex Response Plug-in utility command line syntax and options: