Data Loss Prevention (DLP) clients appear offline

- Updated:
- 24 Nov 2016
- Product/Version:
- Data Loss Prevention Endpoint 5.5
- Data Loss Prevention Endpoint 5.6
- OfficeScan 10.6
- Platform:
- Linux - Red Hat RHEL 4 32-bit

Summary

The DLP clients appear as offline, even if they are online. This happens after a power failure or after restarting the DLP management server.

Restarting the agent services resolves this issue for a day, and then all the clients will be disconnected again.

Details

When clients who are marked offline save an existing or modified file to a local network share, the offline rules force a prompt for justification. If they click Cancel on the justification prompt, the file is either completely deleted or the contents get deleted and 0K file is created instead. All data on the file is completely lost.

This issue is caused by a bug on the Linux kernel creating a time jump. It happens on the DLP servers running as virtual machines with multi-core CPU.

To resolve this, use a single core CPU virtual image.

Rating:

Category:

Troubleshoot

Solution Id:

1058519

Feedback

Did this article help you?

Thank you for your feedback!

What was the problem with this article?

The image(s) in the article did not display properly.

The article did not provide detailed procedure.

The article is hard to understand and follow.

The video did not play properly.

The article did not resolve my issue.

Others. Please specify.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

Thanks for voting.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.