Protect data use on the actual workstation estate
Endpoint DLP concerns activity at the device, including work that may not pass through an office gateway. The important selection inputs are operating systems, application versions, ownership and the channels users need for legitimate work. Compare the required controls with the selected Fortra agent and licence rather than assuming every endpoint receives identical functions.
A mobile laptop, a shared workstation and a technical desktop can have different compatibility and support needs. Inventory existing agents before rollout and identify who owns the device baseline. Personal-device use requires an approved boundary for management and collection; it should not inherit a corporate workstation policy without review.
Validate compatibility and the user recovery path
Build a pilot covering representative applications, peripherals, remote users and approved removable-media workflows. Check policy delivery, agent health and behaviour away from the corporate network. Use known test files to distinguish successful detection from unnecessary interference with an ordinary business task.
The deployment procedure should include installation, failed-install recovery and an authorised removal method. Test the help-desk route for a false positive, including how an exception is approved and limited. Handover should leave a reconciled device inventory, policy assignments and a visible list of unsupported or deferred devices. If MMC is expected to operate the console or review incidents afterwards, include that continuing work explicitly in the service scope.
Evidence to request for this scope
- Confirm current operating-system and application support for every required endpoint control.
- Reconcile expected devices with installed, healthy and reporting agents during the pilot.
- Test authorised offline work and the process for correcting a mistaken restriction.