Solutions

How-To Articles

How to configure File Activity Monitor on endpoints in EPS

01-03-2022 09:51:31 14 0

Type: External

Overview:
This feature helps to monitor any suspicious activity related to the confidential files on your computer, a network drive, or a removable drive in Seqrite Endpoint Security (EPS). Apart from a default set of files, you can customize and select the file types that you want to monitor. You can monitor the selected file types for actions such as copy, delete, or rename. You can generate a report for the file activity from the Reports page.

Note: The File Activity Monitor feature is available in the clients with Windows and Mac OS only.

Applicable Versions: Seqrite Endpoint Security 7.x and above.

Configuring file activity monitor

To configure file activity monitor, follow these steps:

1. Log on to the Seqrite Endpoint Security Web console.
2. Go to Settings > Client Settings > File Activity Monitor.


3. Select the Enable File Activity Monitor check box.

4. In the "Select File Types and Events to monitor within drives” section, select the check boxes of the drives that you want to monitor for file activity.
Note
:
Selection of event is not applicable for Removable Drives, Network Drives. You can select to monitor only ‘delete’ activity for local drives. For Removable Drives you can select 'All Files' to be monitored.

5. In the File types list, select the file types that you want to monitor for all the drive types or you can select all the file types by selecting All File Types check box.

Seqrite recommends selecting the file types you require to monitor only. Selecting All File Types option will increase the count of unnecessary reports resulting in more network traffic and may lead to complications in monitoring the required file activities.


6. In the Custom Files, you can add your own file types that you want to monitor. Click the plus sign (+) to add a new file type extension to be monitored. Use the delete icon to remove a file type.


7. Enter the folder paths that you want to exclude from the monitoring, for example. C:\Smith. For Mac OS, use only forward slash (/) in the folder path. Example:/Users/Admin/Exclude List.

To remove a folder path from the exclusions, click on the delete icon which appears when you click the list entry. If you click on the delete icon, a message box is displayed to confirm the delete action.

8. Click OK to save your settings.

Please contact Seqrite Technical Support for more assistance.