Appliance Management shows payload scan failure
Technical Articles ID:
KB92593
Last Modified: 2023-04-13 20:20:25 Etc/GMT
Environment
Data Loss Prevention (DLP) Monitor 11.4.x, 11.3.x, 11.2.x
Problem
The DLP Monitor is deployed and email protection rule is configured to monitor the traffic. A "Failure to submit the payload" error is reported in the ePO server under Appliance Management.
Cause
Deep Packet Inspection (DPI) Engine is not able to connect to the scanning service as the connection limit exceeded.
Solution
To reduce or avoid the payload scan failures to 0, you must reduce the size of the user list assigned to the rule. Reduce the size to around 300.