You have a mixed Windows/Mac OS environment and have DLP IDM (Indexed Document Matching) policies that utilitse two-tier detection. You want to know how those policies will operate on a Mac OS Endpoint
IDM performs detection either on Agent or Server or using Two tier.
Two tier IDM detection is not supported on Mac so, if two tier detection is enabled, then the Mac will ignore that setting and perform detection locally
The incidents or matches will be the same because the IDM matcher code is the same both in the agents and the server
The only use case we recommend for IDM Two tier detection is that if the customer has huge indices of millions of documents, which would use GBs of memory and they don’t want to load them to the endpoint which typically don’t have as much memory as detection servers
Subscribing will provide email updates when this Article is updated. Login is required.