Data Loss Prevention

 View Only
  • 1.  Email DLP Policy stopped working

    Posted Jul 28, 2016 03:52 AM

    Hi,

     

    I have created one DLP policy for Email prevent, few days it works properly along with other polices, but suddenly e-mail violated by that policy is not getting blocked, however other pollicies are still working properly and I didn't make any changes. Can anybody help me to find the exact root cause and how to troubleshoot. In this regards I would like to inform you that I didn't find any error in my enforcer server and moreover If I copy this policy and save it with another name the policy is working fine.

     



  • 2.  RE: Email DLP Policy stopped working
    Best Answer

    Trusted Advisor
    Posted Jul 28, 2016 08:56 AM

    hello,

     Did you catch lot of incident with this policy before it stopped working ?

    There is a security which is able to stop a policy if it generate too many incident during a certain period of time.if it is due to that you may have a system event id #1817 "The daily incident maximum for policy {0} has been exceeded.\n No further incidents will be generated".

     

     Regards.