Using Data Loss Prevention and File Encryption Parent topic

Apex One integrates with Trend Micro™ Endpoint Encryption to help you protect the sensitive information transferred to removable storage or cloud storage services. After detecting sensitive information or an encrypted file, Apex One displays the File Encryption screen with the following information:
  • User or Shared Key Encryption: You do not need to take further action on these files. Endpoint Encryption automatically encrypts the files based on your type of key.
  • Fixed Password Encryption: You need to provide the password required to decrypt the file.
    Note
    Note
    If you do not provide a password before the countdown completes, Apex One blocks the file transfer.
  • Decryption password prompt: When attempting to open a file previously encrypted with a fixed password, Apex One prompts you to provide the decryption password.
    Important
    Important
    • Encrypted files located on USB devices are subject to Data Loss Prevention scanning when users attempt to decrypt the files. Decrypting files containing sensitive data on a USB device triggers the USB encryption protocol resulting in the system requiring that the sensitive data be encrypted (again). To prevent Apex One from attempting to “re-encrypt” the data, move the encrypted files to a local drive before attempting to access the data.
    • Data Loss Prevention blocks attempts to upload files to cloud storage when using a web client. Encrypt the files manually before uploading using a web client.
  • User Justification: Your administrator may allow you to transfer sensitive information if you believe that there is a valid reason. To continue transferring the data, choose Yes, transfer this file for the following reason and specify the reason.