Data Loss Prevention

 View Only

  • 1.  DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Apr 26, 2018 12:54 PM

    I have recentlly upgraded over 14,000 PCs to the 15.01 agent.  I am receiving reports that users are experiencing the corruption of any video files they are embedding in a Powerpoint presentation.  They load the video into the presentation and it works fine.  They can save the file and it still works fine.  However, if they close the file, it is reported as needing a repair when they open the file again.  If they allow the repair, the video file is gone.  Our technicians worked with Microsoft on the issue.  According to the Microsoft tech, they are seeing a lot of activity from the DLP agent when the file save is going on.  They believe that the DLP agent is causing the corruption during the save process.

    Has anyone else seen this type of issue with the 15.01 agent? 



  • 2.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Apr 27, 2018 07:42 AM

    HI JDW7,

    same issue im facing in my organization ,
    ​if any ppt is save from DLP installed client that will not open if transfer to any one it will ask to repair the sheet.
    ​after removing DLP and create new file that will work fine.
    ​Need urgent solution.

    regards,
    swapnil

     

     

     

     



  • 3.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted May 25, 2018 07:46 AM

    I am also having this issue.



  • 4.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Aug 30, 2018 06:47 AM

    Hey JDW,

     

    Any update from Symantec on this?

     



  • 5.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Aug 30, 2018 09:21 AM

    Symantec said the fix for this problem did not make it in the 15.1 release but should be a part of the next major release (no timeline given).  They suggested a workaround.  They had me uncheck "Monitor Microsoft Office files saved to web locations" in Agent Configuration -> Settings.  While that has resolved the problem, I'm not satisfied with the workaround as it appears to leave a security hole in DLP.  For now, I have to live with it in order to keep my users able to save Powerpoint files with videos.



  • 6.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Aug 31, 2018 07:01 AM

    Hi JDW7,

     

    Is it possible you could give me some more information?

     

    What kind of video formats are you using? are they being embedded from youtube are from the users pc/network?

    What version of Powerpoint are you using and what is the presentation being saved as? (E.g .ppt, pptx, etc.)

    I have a lab and have tested a few things but can't seem to replicate the issue, so knowing the environment a bit more will help me figure out whats going on.

     

    Thanks



  • 7.  RE: DLP 15 Agent appears to be corrupting Powerpoint Files containing Videos

    Posted Aug 31, 2018 12:10 PM

    I was told by a colleague today that this is the following statement from Syamntec ...........

    This is a known issue and addressed with Hotfix 15.0.0108.01004 (available NOW in File Connect)

    What happens is the customer can embed the videos but once they try to save the video we see failure and corruption afterwards

     

     

    REAMDE: 4184041 - BELOW IS THE FULL README

    Symantec DLP Agent Hotfix 15.0.0108.01004 Read Me
     
    Fixes in this Hotfix:
    ---------------------
     
    4184041 - Corruption by Embedding videos in PowerPoint documents
    4183810 - Consecutive file upload to google drive does not detect the file upload with DLP Agent 15.0 MP1 HotFix 15.0.0107.01001
    4183806 - File upload to box.com is not monitored on DLP Agent 15.0 MP1 HotFix 15.0.0107.01001 with IE and FF
      
    Contents:
    ------------
    AgentInstall_15_0.msi
    AgentInstall64_15_0.msi
     
     
     
    To Install the Windows Endpoint Agent Hotfix:
    ----------------------------------------
     
    1. Find the appropriate Agent to install (in /Endpoint/Win32/ or /Endpoint/x64/)
     
    2. In the Software Distribution package give the following command line for fresh installation of DLP agent : 
     
    msiexec /i AgentInstall64_15_0.msi /q INSTALLDIR="<install directory>" ENDPOINTSERVER="<endpoint server>:10443" TOOLS_KEY="<generated tools_key>" RANDOM_KEY="<generated random_key>" SERVICENAME="EDPA" WATCHDOGNAME="WDP" ARPSYSTEMCOMPONENT="1" ENDPOINT_CERTIFICATE="<generated endpoint_cert.pem>" ENDPOINT_PRIVATEKEY="<generated endpoint_priv.pem>" ENDPOINT_PRIVATEKEY_PASSWORD="<generated password>" ENDPOINT_TRUSTSTORE="<generated endpoint_truststore.pem>" LOGDETAILS="Yes" /L*v %SystemDrive%\installAgent.log
     
    The parameters in angular brackets are placeholders and should be generated as per installation guide.
     
    3. If you want to upgrade agent from 15.0.1 then in software distribution package command line you need to give following :
     
    msiexec /i AgentInstall64_15_0.msi /q LOGDETAILS="Yes" /L*v %SystemDrive%\upgradeAgent.log REINSTALL=ALL REINSTALLMODE=vomus
     
     
     
    Note:
    ---------------------------------
    a. This Hotfix can  be installed in place of DLP Agent of version 15.0 or 15.0 MP1.
    b. If during the upgrade from 15.0.1 you want to change certain parametres like ENDPOINTSERVER, etc you may add those in the upgrade script. But please note that those parameters wont be validated and will be picked up as is. 
    For e.g. 
    msiexec /i AgentInstall64_15_0.msi /q ENDPOINTSERVER="<endpoint server>" LOGDETAILS="Yes" /L*v %SystemDrive%\upgradeAgent.log REINSTALL=ALL REINSTALLMODE=vomus
    This command will update the endpoint server as mentioned in the argument. The absence of port number which is mandatory wont be validated 
     
    Copyright (c) 2018 Symantec Corporation. All rights reserved.