Dynamic Agent Group

February 4, 2019, 7:37 am

≫ Next: Installation DLP Agent package

≪ Previous: EDPA.exe high memory utilization

$

0

0

I need a solution

Hello Team,

We are able to create agent group with machine name or enpoint server. But we want to create agent group with ad group. Some people have direct Internet permission from their pc. These people's agent configuration has http https tick. After 1 week, 100 people took direct Internet permission. In this situation we have to add these pc's hostname manually to agent group. If agent group can be created AD Group, we can manage with dynamically. Could you please analyse the FR ?

Kind Regards

Kübra

0

---

Installation DLP Agent package

February 5, 2019, 5:59 am

≫ Next: Rule based sender / recipient excepton

≪ Previous: Dynamic Agent Group

$

0

0

I need a solution

Hi all,

if someone can help, I want to know if we can use only one MSI to install the agent, what i mean is that the package for dlpAgent installation has: msi file, endpoint_cert.pem, endpoint_priv.pem, install_agent.bat, ...In our society and in order to make it easy we want to integrate the installation of the dlp agent in the image installation windows, so when we install windows on computers we have the agent installed with it, so i want to know if we can put the content of the package in one MSI. Thank you

0

Rule based sender / recipient excepton

February 6, 2019, 1:49 am

≫ Next: Error Calling OCIServer Attach for database //***********: 1521/********: ORA-12170 TNS:CONNECT TIMEOUT OCCURED

≪ Previous: Installation DLP Agent package

$

0

0

I need a solution

Hi Team,

We have an policy with 12 rules and all are DCM only. only 2 sender and 2 recipient IDs need to exclude in an rule and not on policy.

Please let me know how to proceed.

Regards

Muru

0

Error Calling OCIServer Attach for database //***********: 1521/********: ORA-12170 TNS:CONNECT TIMEOUT OCCURED

February 6, 2019, 6:00 am

≫ Next: Policy update time

≪ Previous: Rule based sender / recipient excepton

$

0

0

I need a solution

In the middle of deploying DLP 15.5, and When i try Specify Oracle Database Connection i get the below error.

Error Calling OCIServer Attach for database //***********: 1521/********: ORA-12170 TNS:CONNECT TIMEOUT OCCURED

0

Policy update time

February 10, 2019, 7:26 am

≫ Next: DLP Enforce Sever and DLP Endpoint Agent

≪ Previous: Error Calling OCIServer Attach for database //***********: 1521/********: ORA-12170 TNS:CONNECT TIMEOUT OCCURED

$

0

0

I need a solution

Hi all,

If I created a new policy.

how long it takes to update the policy to the clients?

can I check if the client received the new policy?

Thanks,

0

1549902744

DLP Enforce Sever and DLP Endpoint Agent

February 11, 2019, 5:44 am

≫ Next: Image file with IP

≪ Previous: Policy update time

$

0

0

I need a solution

Can I function with the Enforce Server and the DLP agent at different versions? In this case the DLP Server is at 15.5 and the Endpoint agents are at 14.6. Is that a compatible environment? Does Symantec approve that setup? 

0

Image file with IP

February 11, 2019, 11:15 am

≫ Next: DAR scan causing CEH.EXE to crash

≪ Previous: DLP Enforce Sever and DLP Endpoint Agent

$

0

0

I need a solution

Hi all,

Is there an option to block Image file ( screenshot for example ) that contain ip address or credit card number ?

Thanks,

0

DAR scan causing CEH.EXE to crash

February 11, 2019, 2:49 pm

≫ Next: Backup of oracle DB- DLP

≪ Previous: Image file with IP

$

0

0

I need a solution

Hello.  We have some DAR scans that causes the CEH.EXE process to crash on our Network Discover and Protect Servers.    The FileReader.log file on the detection server states "SEVERE: Message chain #3 failed to process message - out of Memory""java.lang.OutOfMemoryError:Jave Heap Space".

Is there a setting to increase the amount of memory allowed in the Java Heap Space?  Is so, where is that setting set on a 15.1 Detection Server?

Thank you in advance. 

Neil

0

• javalang.JPG

---

Backup of oracle DB- DLP

February 14, 2019, 3:07 am

≫ Next: Quarantine deployement

≪ Previous: DAR scan causing CEH.EXE to crash

$

0

0

I need a solution

Hi,

I have a question about the backup of Oracle DB -DLP, i want to know what we have to take in considération when we do a hot backup.

i'll explain our administrator are using a solution for backups (automatically), so if we want to backup Oracle DB with their solution, what we should take in considération, because in best practice there are services of the dlp that must be stopped, multiple directories and files must be backup, so how to deal with backup administrator and take in consideration these points. Thank you

Best regards

0

Quarantine deployement

February 14, 2019, 6:29 am

≫ Next: Making a DCM policy to detect 1337 speak and format arrangements

≪ Previous: Backup of oracle DB- DLP

$

0

0

I need a solution

Hello all,

We want to deploy Symantec Quarantine with SMG. We already have a symantec DLP prevent for mail&Web installed.

We will use specific policies with low number of false positive events and turn them into quarantine mode.

Our issue concern the process to implement the quarantine. Our leadership is afraid of critical mails that will be quarantine without any action.

Issues :

1. We have a central team to handle events and they are in France with normal working hours and we have clients from everywhere in the world
2. We have business practice allowing client to send specific mails (sender+subject+filename+recipients) to autorized partners
3. We could be asked by a manager to release a specific mail very critical

What we read on Symantec Quarantine is that we only can use a flexresponse on Enforce to unlock the mails.But we will have problems with non-working hours and foreigner clients and also with business partners.

We think of a solution with a code send to the user to bypass the block policy but that will be without the SMG and that reduce the risk of a data leak.

Do you deploy SMG+Symantec DLP on your environment/customers. What processes do you think of for dealing with this kind of business issue ?

With regards

0

Making a DCM policy to detect 1337 speak and format arrangements

February 14, 2019, 7:28 am

≫ Next: Network Prevent from Email

≪ Previous: Quarantine deployement

$

0

0

I need a solution

I'm new to DLP so I'm sorry if this is an obvious solution.

How would one go about making a DCM policy that detects when the word "Top Secret Document" is detected if it's spelled in a similar fashion to "70P S3cre37" or "Topsec retdocum ent"?

0

Network Prevent from Email

February 15, 2019, 5:58 am

≫ Next: Can Network Prevent for Web integrate with Fireglass

≪ Previous: Making a DCM policy to detect 1337 speak and format arrangements

$

0

0

I need a solution

Hi All,

I have an environment  where all outgoing email going from the exchange server directly to the internet

I want to add the Network Prevent from Email 

Exchange server  --> Network prevent for Email --> Iron port / Internet.

I have to forward the emails from the Network Prevent for email to the iron port or I can send the email to the internet ( MX )?

Thanks,

0

Can Network Prevent for Web integrate with Fireglass

February 16, 2019, 8:15 am

≫ Next: DLP 15.1 Network Discover and Prevent - .PDF data extraction with out OCR server?

≪ Previous: Network Prevent from Email

$

0

0

I need a solution

Hi All,

Can Network Prevent for Web integrate with Fireglass/web isolation ?

Thanks,

0

DLP 15.1 Network Discover and Prevent - .PDF data extraction with out OCR server?

February 16, 2019, 1:40 pm

≫ Next: Incident Occurred Date/Reported Date discrepancy

≪ Previous: Can Network Prevent for Web integrate with Fireglass

$

0

0

I need a solution

Does anyone know if Symantec DLP 15.1 Network Discover Scans can extract data from .pdf files without an OCR server?   We often get the Text Extraction Failed for PDFs during Data at Rest Scans ( CIFS ) and were wondering if an OCR server is needed to process .PDFs during data at rest scans.   Bellow, is an example of of one of the errors we get from the "ContentExtractionHost_FileReader.log".

| WARN  | cehost | Service [9084] | [5500] | Text extraction failed: type = 'pdf', container='0', encrypted='0', Exception thrown from : TextExtractionRequestExecutor.cpp(146) | CEService.cpp (190)
 

0

Incident Occurred Date/Reported Date discrepancy

February 18, 2019, 10:19 am

≫ Next: Unable to connect to SMTP server

≪ Previous: DLP 15.1 Network Discover and Prevent - .PDF data extraction with out OCR server?

$

0

0

I need a solution

Has anyone else had an incident with the wrong Occurred Date/Reported Date?  We recently had some incidents all from the same user where the Occurred date was in 2023 and the Reported date was before the policy ever existed.  

It was a removable media on MAC incident. 

0

---

Unable to connect to SMTP server

February 19, 2019, 2:03 am

≫ Next: Network Prevent: SMTP Block not working

≪ Previous: Incident Occurred Date/Reported Date discrepancy

$

0

0

I need a solution

Hi, everyone.

I encountered the following the error "Couldn't connect to the SMTP server using the specified settings. Please re-enter the SMTP settings." when entering the SMTP setting in the General Settings on Enforce console.

However, the settings are properly entered and I can log into Exchange OWA using the credentials. I am also able to telnet to the SMTP server via port 25.

FYI,

Server: 172.27.10.75

System Email: dlp.mail@example.com

User ID: example\dlp.mail

Password: ********

I need urgent solution on this.

0

Network Prevent: SMTP Block not working

February 20, 2019, 7:07 am

≫ Next: Trail Version required for Testing

≪ Previous: Unable to connect to SMTP server

$

0

0

I need a solution

I would like help on the issue which I’m facing right now is that the email are still being sent out to the receiving party despite the SMTP block response rule. I have verified that on the incident, the response rule action has been taken according to its history. 

FYI, the Network Prevent for Email is inline mode between a Messaging Gateway and Exchange and not in Trial mode.

0

Trail Version required for Testing

February 22, 2019, 2:40 am

≫ Next: Mask credit card numbers

≪ Previous: Network Prevent: SMTP Block not working

$

0

0

I need a solution

Hi,

i want to download and test the Symantec Data Loss Prevention trail version, where can i download the trail version.

since i am new to this community, any help would be appreciated.

thanks

0

Mask credit card numbers

February 22, 2019, 9:27 pm

≫ Next: How to expose the DLP endpoint Discover server over internet for client communication?

≪ Previous: Trail Version required for Testing

$

0

0

I need a solution

I have a policy for monitoring credit card number in email that is working fine.

But the customer wants that the user watching these incidents should not see the credit card numbers. Currently, I as admin when see details of incident I can see the credit card numbers as it shows the matching content .

Is there any way where the DLP user watching the incidents cannot see the credit card ? Or is it possible to mask it and see only last four digits

0

How to expose the DLP endpoint Discover server over internet for client communication?

February 25, 2019, 2:33 am

≫ Next: Detection exceeded the time limit per file - DLP Endpoint

≪ Previous: Mask credit card numbers

$

0

0

I need a solution

There is a requirement to expose the endpoint disocver server over internet and create the policies and package accordingly, can anybody help me how steps and guides for the same, I need help for cloud and on-premise deployment steps and guide line.

0