Search the ManageEngine site:  
 

Help Center

Quick Start

File Auditing

File Analysis

Data Risk Assessment

Endpoint DLP

Cloud Protection

General settings

Release notes

Troubleshooting

Guides

Third-party software Contact us

Control Policy reports

Control Policy reports capture events that were monitored or blocked based on the configured control policies. These reports help you verify that policies are enforcing as expected and investigate specific incidents. Find the reports available under Prevention Policy Reports below.

Clipboard Control

The Clipboard Control report displays all events of clipboard copy actions, along with the file copy actions that have been blocked based on the Clipboard Control Prevention policy (formerly File Copy policy).

Viewing the Clipboard Control report

You can view file copy actions and file copy attempts that have been blocked in the Clipboard Control report. Follow these steps to view the report:

  • Select Endpoint DLP from the applications drop-down.
  • Go to Reports > Prevention Policy Reports > Clipboard Control.
  • Specify the endpoints and period for which you want to view the data using the Endpoint Name and Period drop-downs.

Note: Auditing file paste actions is enabled by default for all data loss prevention (DLP) policies and will be reported in the File Paste report under Source Based reports. See the report configuration page to learn more.

Removable Storage Control

The Removable Storage Control page displays two reports, each capturing a different type of USB device event:

  • Allowlisted: Lists the USB sessions where a device was allowed, capturing session details and the file activity performed during the session.
  • Blocklisted: Lists the events where USB devices were blocked.

Viewing the Removable Storage - Allowlisted report

Follow these steps to view the report:

  • Select Endpoint DLP from the applications drop-down.
  • Go to Reports > Prevention Policy Reports > Removable Storage - Allowlisted.
  • Use the Endpoint Name, Periods, and Status Filter drop-downs to filter the report. Status Filter options are Connected and Disconnected.
  • Click View Reports in the USB SESSION ACTIVITY column to view a detailed breakdown of file operations performed during a session. You can view the following:
    • Key session metadata.
    • An activity summary pie chart showing the distribution of file actions (i.e.,create, modify, delete, and read) performed during the session.
    • A file activity table below the panels that lists individual operation logged during the session.

Viewing the Removable Storage - Blocklisted report

Follow these steps to view the report:

  • Select Endpoint DLP from the applications drop-down.
  • Go to Reports > Prevention Policy Reports > Removable Storage - Blocklisted.
  • Use the Endpoint Name and Periods drop-downs to filter the report.

Note: When a USB device is blocked, no session is initiated. Therefore, session activity details are not available for entries in this report.

Don't see what you're looking for?

  • Visit our community

    Post your questions in the forum.

     

  • Request additional resources

    Send us your requirements.

     

© 2026 Zoho Corporation Pvt. Ltd. All rights reserved.