From DLP Enforce console, select 'Manage' - 'Data Profiles' - 'Exact Data':Ħ. The Remote EDM Indexer is named RemoteEDMIndexer.exe under the SymantecDLP\Protect\bin:Ĥ. Choose to install the 'Indexer' only and no other components:ģ. The Remote EDM Indexer is installed from the same installation program as the other Symantec DLP components. Firstly, install Remote EDM Indexer on the machine of the data owner. We just assume that the data needed to be protected is an account/password table, just like this:ġ. Here are the graphical steps to implement Remote EDM Indexing. Remote EDM Indexing enables the owner of the data, rather than the DLP administrator, to index the data on a remote machine. Think about this scenario: a department neet to protect an account and password table, but, it cannot be provided to the DLP administrator to create the EDM index as it's sensitive to other department. Please contribute and help make interpreting the sylink log easier for SEPM admins everywhere.įeel free to reach out to me privately as well if you need anything.
Responses from Symantec employees would also be very much appreciated as I'm sure there are many more that can be added. What keywords do you search for or what errors codes have you seen that helped you fix a problem between SEP client(s) and the SEPM? I'll start by adding my list of "keyword searches" and error codes that I've used and seen in the past. Let's get this started and help out SEPM admins who's responsibility it is to review sylink logs. If you've ever reviewed a sylink log in detail than you know how frustrating it can be at times. I urge everyone to contribute to it by adding comments below as I'll be constantly updating this article with new information that has been posted. I want it to be dynamic and have a life of its own. My purpose is to change that with this article. However, the problem is that it's not always easy to review the log and understand how to interpret it. It reveals a great amount of information on what's really going on behind the scenes.
How: How to enable Sylink debugging for Endpoint Protection clientsĮnabling and reviewing the sylink debug log is the first step in troubleshooting communication issues between SEP client(s) and the SEPM. Why: Troubleshooting communication issues Where: Enabled via the registry (Windows)
When: When you determine there is a communication issue between SEP client(s) and the SEPM
0 kommentar(er)
