Data Loss Prevention

 View Only
  • 1.  DLP Waiting

    Posted Jan 15, 2016 05:33 AM

    Hello,
    sorry that I´m posting my rq again, but now, I have more information about it. I am transferring archive of data via ftp service(client - total commander). When I was transferring data less 1GB, everything is ok. When I was transfering data more than 1GB, so when the first 1GB is uploaded then upload waits then upload continues after 1-2 minute later.. I checked proxy´s logs, fw setting, but nothing in ... Can this waiting process be caused by DLP? bcs When I put ftp server out from DLP´s sec. check. This problem doesn´t exist.

    Thank you for your help



  • 2.  RE: DLP Waiting

    Posted Jan 15, 2016 11:31 AM

    I think you answered your own question by stating the problem goes away when you disable DLP so your question may be why or how is DLP interfering with the upload.

    For that you would want to post complete details, what detection channel is scanning the upload?  Is it Web Prevent or the Endpoint agent?  Is it one large file or are you uploading lots of smaller files?  Are you uploading zip files?  Depending on the detection channel you can check the logs to see what is going on as well, how long detection is taking for example.

    Is it stopping you from uploading?  Or is it just slowing you down?



  • 3.  RE: DLP Waiting

    Posted Jan 15, 2016 05:52 PM

    Hi,
    yeah exactly, I don't exactly understand why and how this happens, this is the point what I would like to know. It´s Web Prevent, I was uploading separately 4,5GB (zip), 10GB(zip), 20GB(zip) = same situation has happened, I have not permission to manage this appliance, if you mean to check logs from DLP.. I upload 100% of these files after the process was interrupted "Transfer failed", probably timeout expiration on server side..I checked ftp server and no full size of each zip is copied there.



  • 4.  RE: DLP Waiting

    Trusted Advisor
    Posted Jan 18, 2016 02:29 AM

    hi,

     are you able to test a transfer of a file of same size (not a zip archive) ? It is possible that analyzing such a huge zip file takes more time than expected (unziping, analyzing, rezipping) and that this cause your ftp server to timeout the connection as it seems to it that there was a transfer issue. If it is correct explanation, this should not happen with a one file transfer.

     

     regards.