DLP Agent performance degrades when a user remotely accesses another endpoint
Last Updated May 30, 2019
DLP Agent performance may be degraded when an endpoint user accesses another endpoint using the Microsoft Remote Desktop Connection application and both endpoints have DLP Agents running.
Performance may be degraded because the endpoint that uses a Remote Desktop Connection to access the other endpoint attempts to analyze the network packets generated for the Remote Desktop Connection. The endpoint being accessed may also experience similar performance degradation due to the same network packet analysis process.
White list network access monitoring for the Microsoft Remote Desktop Connection application.
Complete the following steps in the Enforce Server administration console:
Go to System > Agents > Application Monitoring.
Add the Microsoft Remote Desktop Connection application.
Enter Microsoft Remote Desktop Connection in the Name field.
Enter mstsc\.exe in the Internal Name field.
Enter mstsc\.exe in the Original Filename field.
Select Generic under the Application Type section.
Enable the following under the Application Monitoring Configuration section:
Confirm that Network access is disabled.
Save your changes.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe