Data Loss Prevention

Hello,

We install a new probe on an enforce server but the filereader is blocked on Starting.

We try to recycle but nothing append.

On fileRead0.log we see that the filereader stops on :

Sep 16, 2015 4:09:07 PM com.vontu.messaging.protocol.MessageChainProtocolManager start
INFO: Waiting for protocol

and after that DLP try to restart

Sep 16, 2015 4:26:06 PM com.vontu.util.config.SystemProperties setSystemProperties
INFO: System Properties:

any ideas ?

1. What do you have the Data Execution Protection setting set to in Windows?  By default yiou have to specify the services that are listed.  Change it to focus on Windows services and restart the server.  Should fix it

Hello Jonathan,

Could you be more specific ? we need to add symantec services on DEP ?

Regards

Thomas

Thomas,

Is this on a Network Monitor Server?? 

• Make sure that you have installed Winpcap and all of the required RPM's if Linux.
  • Make sure you are installing the right version of Winpcap
  • Install the one that came with the install package (newer or older vwersion will not work)
• Also make sure you have selected a Network Card in the configuration of the Network Monitor
• The network card info will show up only after you have recycled the services.

Lastly make sure to increase the Heap Size in the VontuMonitor.properties file

• Min: 512
• Max: 1024

Then recycle the services or reboot the box.

Good Luck

Ronak

Yes follow this note:

http://windows.microsoft.com/en-us/windows-vista/change-data-execution-prevention-settings?woldogcb=0

It helps you understand and remove DEP​

Solution found.

Juste needed to restart Vontu Monitor Controller :