Apex One monitors data transmissions through the Server Message Block (SMB) protocol, which facilitates shared file access. When another user attempts to copy or read a user’s shared file, Apex One checks if the file is or contains a data identifier and then allows or blocks the operation.
The Device Control action has a higher priority than the DLP action. For example, if Device Control does not allow files on mapped network drives to be moved, transmission of sensitive data does not proceed even if DLP allows it.
For details on Device Control actions, see Permissions for Storage Devices.
For a list of applications that Apex One monitors for shared file access, see the Data Protection Lists document at:
http://docs.trendmicro.com/en-us/enterprise/data-protection-reference-documents.aspx