When sending a single message with multiple recipients through SMG with DLP enabled (routing and Enforce Access) and where DLP has only one policy to add Email Quarantine header information, multiple DLP incidents are created.
The X-Audit-Id on the messages in the DLP incidents are the same but each DLP incident for the one policy has a different dlp-uniquemessage-id. Through viewing WireShark on DLP Enforce server, it appears that SMG may be submitting the same message more than once when there are multiple recipients.
This issue has been addressed with the SMG v10.0.2 release.
Applies To