Symptom:
If a user moves a file (instead of copying it) from a local disk to a USB device and CA Data Protection blocks the file, the user may lose the file.
Solution:
If a Data In Motion trigger blocks the move operation, the CFSA deletes the file from the target USB device. At the same time, the file is no longer saved on the local disk because it was moved by the user (and the Windows operating system deleted it). Consequently, the file is now lost. This deletion is due to a limitation in the Microsoft API.
First, educate your Windows users about this risk. These users must always copy important files to a USB device. If the copy operation gets blocked, the original file still exists on the local disk.
Second, configure the Data In Motion control action to store a copy of the blocked file in the CMS database. The control action includes a Capture Prohibited Activity? setting. Verify that this setting is True.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|