Data Loss Prevention

 View Only
  • 1.  Error in DLP Endpoint

    Posted Oct 03, 2017 10:32 AM

    Hello ! Problem with some DLP Endpoint agents:

    10/03/2017 12:07:58 |  5376 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.crash_dump_status, SubCategory: agent_event.subcategory.crash_dump_unavailable, Extended Value: NA
    10/03/2017 12:07:58 |     0 | WARNING | AgentMgmt.AgentLoggerStatusPublisher | 
    10/03/2017 12:07:59 |  5376 | ADMIN   | Service         | System started: 10/03/2017 12:07:59; Windows Version: 6.1 Service Pack 1; Product: WORKSTATION; Total Memory: 2097151KB  Available Memory: 916620KB; Locale: ru-RU
    10/03/2017 12:07:59 |     0 | WARNING | Service         | 
    10/03/2017 12:07:59 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.monitoring_status, SubCategory: agent_event.subcategory.monitoring_enabled, Extended Value: NA
    10/03/2017 12:08:06 |     0 | SEVERE  | Communication.CommLayer.ClientDataConnection | 
    10/03/2017 12:08:08 |     0 | WARNING | FileSystem.DriverCommunication |  | [SYMRESULT 0x80010005]
    10/03/2017 12:08:08 |  5040 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.file_system_driver, SubCategory: agent_event.subcategory.driver_up, Extended Value: NA
    10/03/2017 12:16:48 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:17:01 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:17:08 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:18:21 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:20:55 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:21:13 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:21:37 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:22:49 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov
    10/03/2017 12:23:24 |  8048 | ADMIN   | AgentServices.SystemEventLogger | Category: agent_event.category.detection, SubCategory: agent_event.subcategory.detection_timeout, Extended Value: Detection timeout: HTTP event performed by INSCAPITAL\Trifonov



  • 2.  RE: Error in DLP Endpoint

    Posted Oct 06, 2017 09:44 AM

    Hi Mikhail.

    Have you tried reinstalling the agent?
    Have you checked that your antivirus may be in conflict with the DLP?

    What's the DLP version?
    Is this error displayed on how many workstations?


    https://support.symantec.com/en_US/article.TECH235342.html

    https://support.symantec.com/en_US/article.tech12638.html

    Regards,

    Diego



  • 3.  RE: Error in DLP Endpoint

    Posted Oct 09, 2017 02:54 AM

    Hi.

    The agent is reset, errors are resumed. There is no conflict with the antivirus. Symantec Data Loss Prevention 14.6