Can the DLP Endpoint Agent Monitor or Prevent outbound FTP traffic (GET requests)?
search cancel

Can the DLP Endpoint Agent Monitor or Prevent outbound FTP traffic (GET requests)?

book

Article ID: 160704

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

You wish to use the DLP Endpoint Agent to monitor FTP downloads as well as uploads.

Environment

DLP 15.x

DLP 16.x

Resolution

The Symantec DLP Endpoint Agent does monitor FTP requests leaving the end user machine (PUT requests), but the agent does not monitor inbound FTP traffic (GET requests).

If you need to monitor all FTP traffic in all directions, we recommend Network Monitor, which can passively view all FTP traffic, or Network Prevent for Web, which can block or modify FTP requests via a proxy.


Powered by Wolken Software