Question

Your organization has onboarded Windows 11 devices to Microsoft Purview Endpoint DLP. Users primarily use Google Chrome and Mozilla Firefox to access cloud services. You configure an Endpoint DLP policy that should audit and restrict uploads of documents containing credit card numbers to unsanctioned websites. During testing, you notice that upload activities from Chrome and Firefox are NOT being detected, while activities from Microsoft Edge are captured correctly. What must you do to ensure browser upload activities are monitored on Chrome and Firefox?

Accepted Answer

Install the Microsoft Purview extension in Chrome and Firefox on the onboarded devices.

Answer

Add Chrome and Firefox to the list of unallowed browsers in the Endpoint DLP global settings.

Answer

Re-onboard the devices using the Microsoft Monitoring Agent instead of Microsoft Defender for Endpoint.

Answer

Enable just-in-time protection so files are evaluated only when accessed by the browsers.