OfficeScan monitors data transmitted to a mobile device through synchronization software.
For a list of supported synchronization software, see the Data Protection Lists document at:
If the data has a source IP address of 127.0.0.1 and is sent through either port 990 or 5678 (the ports used for synchronization), OfficeScan checks if the data is a data identifier before allowing or blocking its transmission.
When OfficeScan blocks a file transmitted on port 990, a file of the same name containing malformed characters may still be created at the destination folder on the mobile device. This is because parts of the file have been copied to the device before OfficeScan blocked the transmission.