Data Loss Prevention

 View Only
  • 1.  DLP Query

    Posted Oct 10, 2014 09:43 AM

    Hi All - I have a mass mail server integrated with symantec network prevent server (DLP). we get in a day abt 5L mails and some time the mails gets into queue at MTA and DLP process seems to be slow...example if queue is 50k, but dlp is processing per second only 7 or 8 mails ....i was just checking the dlp config files and identified following parameters for fine tuning...all the below ones are default ...I would like to understand each parameter and set as per my setup requirement. pls suggest

     

    This configuration from communication.properties . Also like to  know any document on all these parameters


    maxConnections = 25
    operationTimeout = 240000
    inactiveConnectionTimeout = 0
    maxQueueSize = 5000
    selectionInterval = 100
    threadPoolSize = 10



  • 2.  RE: DLP Query

    Trusted Advisor
    Posted Oct 16, 2014 09:40 AM

    Hello,

     7 to 8 mail per second looks really slow. Does this slow processing happens recently or was it always like that ?

    May you have some other issue than just fine tuning DLP communication. Usually DLP latency comes from (depending also on your DLP version) :

    - Prevent server ressource limitation (CPU, memory or disk)

    - Policies with "too many" exceptions (unfortunately DLP dont like that)

    - Policy rules using too many complex regex

     

     Regards.