User Exclusion doesn't work when the system goes offline

Technical Articles ID: KB91488
Last Modified: 2023-05-25 05:26:56 Etc/GMT

Environment

Data Loss Prevention (DLP) Endpoint - all supported versions

Windows operating system - all versions that DLP supports

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

When the system goes offline (out of the corporate network), the DLP Endpoint console shows the connectivity state as Not Connected to Corporate Network. At this state, if you configure the LDAP Object Identification for the User or User Group based on Identify LDAP Objects by their name, the exclusions don't work.

Cause

DLP can't contact the LDAP server to translate the UserName to an SID in the following scenarios:

LDAP Object Identification for the User or User Group is based on Identify LDAP Objects by their name
DLP shows Not Connected to Corporate Network

So, the exclusions for the User or User Group that has been defined based on Identify LDAP Objects by their name don't work.

Solution

To resolve this issue, select the Identify LDAP Objects by SI (Security ID) option for LDAP Object Identification when you define User or User Group Exclusions.

Attachment

Solution.zip
14K • < 1 minute @ broadband

Affected Products

Data Loss Prevention Endpoint 11.6.x (EOL)

Languages:

This article is available in the following languages:

Knowledge Center

User Exclusion doesn't work when the system goes offline

Environment

Problem

Cause

Solution

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

User Exclusion doesn't work when the system goes offline

Environment

Problem

Cause

Solution

Attachment

Affected Products

Languages:

Choose your region

Title

Title