On the policy you have the option of device control

On the policy, you have the option of Device Control and content aware removable
storage protection. Now, that does not use tagging, but that does have where it can do
the text extractor to analyze and see if that text exists, or you can just go with Device
Control only. When you go in and select these, you'll have different modules that will be
activated or deactivated having to do with your requirements. Now, if I also put the
license key in for the full feature, you would have another option in here to have it
where we're doing everything, looking at text and everything. If I use the Device Control
and content aware removable protection, that is a standard setting for our Device
Control only. It will support you protecting me against using any of these devices, but it
doesn't give you the ability to do any tagging of the documents. Device Control only just
has to do with the Device Control rules, it doesn't look at content at all. When I
select the different Operational Modes, you're going to see that we have several
modules that are selected by default. Now, some modules don't show up in here if you
don't have the license key for that. But if you'll notice we have the User
Interface feature, we do want to block the devices, and we also have these browsers.
Now, the browsers don't really mean anything for Device Control, that all has to do with
the content protection. You do want the Reporting Service, and we want to have it
where you can use the Removable Storage Protection Advanced Option. So, if I want to
prevent you from plugging in these devices, you can use that. And then we have the
Browser Address Bar URL detection. Again, that really has to do with our
content protection. So, the User Interface is where I can enable or disable the fact that
you have that console. The Device Blocking, sometimes, you might have to go in and
disable that because someone is having a problem. Now notice, these two have an
asterisk, that means that if you go and change those, a machine, after it gets that policy,
it has to be rebooted. Now, we also have the Reporting Service, and that all has to do

with our evidence storage and the fact that we do want to receive that incident. Now, we
have some advanced options, as I pointed out before, and this is where we can protect
people from using TrueCrypt, their phones, oh yeah, and the Advanced File
Copy Protection. On the Advanced Configuration, you have where I can delay the start
of the DLP client. Now, don't do that unless support tells you. I turn on my computer, the
DLP client runs immediately. Do I want it to be in Safe Mode? Well, we don't have that
enabled by default, because let's say something was going on and you needed to go
into Safe Mode to try to do some troubleshooting. Well, if the client is the problem, the
client will be the problem in Safe Mode too, oops, yeah, that's not good. Now we also
have, what's the maximum memory the clients going to use? Well, the default is a
150MB. Now, with the DLP Device Control only, it really shouldn't be a big issue for
the memory. Now remember the watch dog, what happens is, if it exceeds this memory,
the client will stop and will restart to sort of like clear out the cache. Now we also have
the Access Protection Settings. All of these should be enabled, because if you'll notice, I
want to make sure we're protecting this particular client, if somebody goes in and they