Video Screencast Help

Symantec DLP, whats happen if Enforce server stop responding, how detection servers operate?

Created: 03 Nov 2011 • Updated: 08 Nov 2011 | 1 comment
sacrificeme's picture
This issue has been solved. See solution.

Whats happen if Enforce server stop responding, how detection servers operate?

Is they still do work for detection data loss, monitor network trafic acording to configured policy?

Discussion Filed Under:

Comments 1 CommentJump to latest comment

Red Vector's picture

When the Enforce server goes offline (for whatever reason), then all of the servers that are connected to it will continue to function normally and incidents will queue locally until Enforce comes back online.  Once the Enforce is back online then any incidents collected during the outage will get shipped over to Enforce so you will not miss anything.  The only restriction you have on incident collection when Enforce is down is how big the local hard drives are on the monitor servers.  Generally you would have to have a long Enforce outside for the monitor servers to fill up their local hard drives but it would be possible if your montior servers aren't sized big enough.

SOLUTION