Why are DAR bytes scanned on the Scan Detail Report different than actual bytes?

book

Article ID: 159968

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover

Issue/Introduction

DAR bytes scanned on the scan detail report are different from the actual bytes.

Resolution

The following reasons can account for having a difference between the number of DAR bytes scanned on the scan detail report and the actual number of bytes in a given share: 

  • File exclusions: File exclusions can cause differences to the extent that there are files that get excluded from the scans 
  • Very large files: Any files that are > 30 MB are scanned only for the first 30 MB, and this is what gets reported in the scan detail report. Any files that are larger than 30 MB cause a difference in the scan results 
  • Directory permission errors: If a scan cannot be accessed due to credential failure, these are excluded from the scans and cause a difference