At times, an Endpoint Agent will behave in a way contradictory to expectation. Larger than simply missing a single policy, the Endpoint Agent will seemingly completely ignore all Prevention or Monitoring channels.
Missing Prevention or Monitoring on an Endpoint across all channels may be a sign of a bad or missing license. To see what licenses the Endpoint is approved for, review the EDPA logs for the following:
01/10/2017 14:52:37 | 14216 | INFO | AgentServices.License | License update received: Discover: Yes, Monitor: No, Prevent: No, Agent Management: Yes
In this example, both Endpoint Monitoring and Prevent are not approved by the currently loaded licenses on Enforce. The Endpoint Agent will fail to function as expected if the adminstrator believes Monitoring and Prevent should be enabled.
This line is only ever printed in EDPA under two circumstances:
To update the Endpoint Agent licenses at the Endpoint:
Please note DLP endpoint licenses are perpetual. This means that the license authorizes you to use the product indefinitely.