Symantec Data Loss Prevention (DLP) shows Symantec Protection Center (SPC) Enterprise 3.0 connection logins but they have no logoff time.
|Article:TECH201973|||||Created: 2013-01-23|||||Updated: 2013-01-24|||||Article URL http://www.symantec.com/docs/TECH201973|
When looking in the Symantec DLP database it shows events for the user that is used for SPC/DLP Integration with a login time but no logoff time.
A single SOAP based connection to DLP's Web Services (Reporting API) is made per job to communicate with DLP.
When the job is done the connection is dropped instead of giving a logoff command.
This is functioning as designed.
To give the logoff command at the end of the job is not required and adds more cycles to be processed by both DLP and SPC that are not needed.
There for the connection is just dropped.
Article URL http://www.symantec.com/docs/TECH201973