For ITM / Endpoint DLP, you can choose one of these solution options:
-
Mixed- mode ITM and Endpoint DLP: includes all ITM signals and features. (Endpoint DLP is a subset of ITM.) You might choose this solution to monitor some users, such as low-risk users for DLP-only signals and other users, such as higher-risk users for all activity.
-
Full ITM: includes all ITM signals and features. You might choose this option if you plan to monitor all endpoints with full agent capabilities.
-
Endpoint DLP-only: include DLP-only signals and features. You might choose this option to meet compliance or security requirements.
Monitored User Activity on Windows and Mac describes which signals are sent by Windows and Mac Agents. For ITM users, all signals are sent and include DLP signals that are sent for all users (ITM-only, Endpoint DLP-only, Mixed-mode).
See Supported Platforms and System Requirements for ITM / Endpoint DLP.
Related Topics: