Toggling Windows DLP Endpoints Between Stealth and Interactive Mode

Toggling Windows DLP Endpoints Between Stealth and Interactive Mode

Summary
A registry value can be altered to switch between modes.
Notes and Warnings
Note Take caution when performing actions on the Windows registry.
Problem

Endpoint packages created using the Stealth Mode option have been deployed on the environment. Is there a way to confirm on user machines whether the Endpoint is configured to be in Stealth Mode or not?

Alternatively, is there a way to switch Endpoint between Stealth Mode and Interactive Mode without having to apply a different Endpoint installation package?

For details regarding the difference between Endpoint modes, refer to the following article:
Differences Between Stealth and Interactive DLP Endpoint Modes
 

Solution

A toggle is available for the Endpoint mode within the Windows registry (Regedit.exe):

HKLM\SOFTWARE\Websense\Agent\InstallStartMenu

  • 0 - Stealth Mode
  • 1 - Interactive Mode

Restart the Endpoint Services afterward to apply the changes:

  • Within an administrative command prompt, navigate to the Websense Endpoint installation directory
  • Stop the Endpoint services:
    • WDEUtil -stop all
  • Start the Endpoint services:
    • WDEUtil -start all

    • Related Articles

    • Differences Between Stealth and Interactive DLP Endpoint Modes

      Summary This article goes through the differences between stealth and interactive DLP Endpoint modes Problem What is the difference between the Stealth mode and Interactive mode when building a DLP Endpoint installation package? Solution The ...

    • F1E DLP Inline Proxy

      Introduction to the F1E Inline Proxy The Forcepoint DLP Inline Proxy, which runs locally on the F1E Endpoint Client machine, is the preferred way to enforce web policies and is intended to replace the use of F1E browser extensions. As described in ...

    • Forcepoint DLP backup

      How do I back up and restore Forcepoint DLP? Backup and Restore | Forcepoint DLP | 29-Apr-2022 Back up your Forcepoint DLP system periodically to safeguard your policies, forensics, configuration data, fingerprints, encryption keys, and more. ...

    • Announcing the Availability of Forcepoint One Endpoint v20.02 for Windows and Mac Endpoint Machines

      Summary Announcing the Availability of Forcepoint One Endpoint v20.02 for Windows and Mac Endpoint Machines Information Forcepoint is pleased to announce the release of the new Forcepoint One Endpoint version 20.02. The Forcepoint One Endpoint ...

    • Obtaining Removable Media Serial Numbers for DLP Endpoint Policies

      Problem Starting from Forcepoint DLP (formerly Websense Triton AP-DATA) version 8.2, Endpoint Devices can be configured to include device serial numbers to limit the scope of inclusion compared to the use of wildcards. In lieu of generating a sample ...