DLP Help Desk generates overrides that allow users to perform functions that are normally prohibited.
Quarantine release
Trellix DLP Endpoint discovery can quarantine local file system or email storage files with sensitive content. To release the files from quarantine, the user must request a quarantine release code from the administrator.
Note
Quarantine release isn't supported on macOS.
Policy bypass
When there is a legitimate business case, a user can request permission to access or transfer sensitive information. The administrator can then grant permission for a limited time. When this is done, all sensitive information is monitored, rather than blocked, according to existing rules. Both the user and the system administrator receive messages about the bypass status when it is enabled and disabled. The user sees a pop-up message. The administrator sees an event entry in the Operational Event List.
Client uninstall
The Trellix DLP Endpoint client is protected from unauthorized removal. While it is typically uninstalled by an administrator using ePO - On-prem, there are situations where you need to uninstall it in the field. When an administrator issues a release code (also known as a challenge-response key) you can remove the client using the standard Microsoft Windows or macOS functions or third-party uninstallers.