Data Loss Prevention

I'm getting a lot of the following both from Email Prevent and Web Prevent servers. Consequently, no incidents are being created. I recently had to reinstall Oracle and the Enforce server. I then added the existing detection servers to the new Enforce server. Could this have something to do with it?

The most common cause is the lack of sufficient tablespace to store incidents in the Oracle database. In this case, incidents from all detection servers will generate the "corrupted incident received" error.

After extending tablespace, the system renames the incident files that could not be stored in Oracle to the .bad extension, and saves them in /opt/Vontu/Protect/incidents. Once you have resolved the tablespace issue, you can rename the .bad files to .idc files, and the system will then store them in Oracle normally.

My tablespaces appear to have plenty of space:

                                                                   TABLESPACE TOTAL FREE
TABLESPACE_NAME FILE_NAME                                            TOTAL KB     KBYTES  NEXT_FREE
--------------- -------------------------------------------------- ---------- ---------- ----------
DRSYS           /opt/oracle/oradata/protect/DRSYS01.DBF                 20480      19456      19456

SYSAUX          /opt/oracle/oradata/protect/SYSAUX01.DBF               512000     376832     376832

SYSTEM          /opt/oracle/oradata/protect/SYSTEM01.DBF               542720     191872     191872

UNDOTBS1        /opt/oracle/oradata/protect/UNDOTBS01.DBF            33553408   33529600    4063232

So, you only reinstall the Oracle and Enforce Server, why not try to reinstall your Detection Server too? Maybe this issue come from the communication between the Enforce Server and Detection Server.

:-)

Well, I already uninstalled and reinstalled the Detection Server software. I suppose next I'll try uninstall OS, then reinstall OS, then reinstall Detection server software.

CentOS reinstalled. But by the gods, Oracle install and database creation takes HOURS!!!