Hello,
I would really like to understand what the application file access component of the DLP endpoint agent is doing and the benefit of using it. I have an application, Quickbooks, that runs really slow when application file access is enabled and yet quickbooks in not within the application monitor list. I have discovered that quickbooks integrates with office products like excel, word and adobe reader. I have ignored the path to where the .exe are for these programs in the endpoint agent config and left the application file access enabled. Result is slow performance. If I uncheck application file access I get good performance. If I enable application file access and within the monnitored applications uncheck all channels for adobe, excel and word I get good performance. So if I were to leave the monitor application setting off for adobe, word and excel, which affects all endpoint agents, what am I losing or missing in the detection, etc of incidents.
Thanks!
Joe