Keep Forensic File as Completed tmp File instead of Processing tmp File

rated by 0 users
This post has 1 Reply | 2 Followers

Top 150 Contributor
Posts 23
h0pefree Posted: 4 Jun 2012 8:50 PM

Hi,

I would like to request endpoint agent to have the intelligent to send the full content .tmp file before rename instead of under processing .tmp file back to management server as forensic data when action set to permit or encrypt.

I encounter problem to recover back the complete file by using forensic file when user edit and save Microsoft Word - .doc or docx file into removable media. The tmp file is not the complete file and some of the file content is missing.

This issue happen on Microsoft Office application. You can refer to Microsoft KB for more information on the save procedure. http://support.microsoft.com/kb/211632

I understand that we could not have complete tmp file for incident with block action due to the endpoint agent need to intercept the saving process before it successfully save to the file.

However, when the file is just encrypted or monitored, endpoint agent should have the intelligent to send back the completed file instead of the processing file.

|
Top 25 Contributor
Posts 116
Moderator

Hi,
 
Thank you for inquiring about a new feature in Websense Data Security.  Your request has been entered into our Feature Request tracking system, and our Product Management team will review it within the next 30 days.  If you need a response sooner, we recommend that you open a case with Technical Support.  When the request is reviewed, the product manager will decide whether to accept this for future consideration or ask for more information.  Please note that Websense receives a high volume of feature requests, and as such Websense cannot include all of these requests in the next product release.  That said, the product team is constantly revisiting the list of requests to determine the features that have been most frequently requested, so that the highest priority features are addressed.
 
We look forward to your continued participation in the Websense community and welcome your active involvement in our product direction.
 
Thank you.
Tina

|
Page 1 of 1 (2 items) | RSS