I have a policy name is File A with rule to detect by keyword. I want to monitor and block when endpoint copy file A to USB and HTTP/HTTPs so I enable option Removable Device and HTTPS, HTTP on Agent Configuration. I config Response Rule with Endpoint Prevention: Block when any protocol as Removable Device, HTTPS, HTTP, everything is okay. But I have another policy name File B to classify another file and I want to monitor when it is copied to network file server –> I enable option Copy to Network Share on Agent Configuration. And DLP Agent still sent the log of File A when I copy it to File Server. How can I disable it because I only need log of File B when It is copied to File Server ?
Thank in advance.