Email messages are not processed on Network Monitor or Email Prevent

Products

• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email

Issue/Introduction

After upgrading to DLP 11 or adding an L7 Filter to the SMTP Protocol configuration, email messages are no longer processed on Network Monitor or Email Prevent servers. The following error is present in the FileReader0.log:

com.vontu.protocols.L7Dispatcher handleInvalidStream
SEVERE: Monitor Error 11, Unknown protocols in ContentStream table: contentStreamID: 1, _data: MAIL FROM:<[email protected]>
RCPT TO:<[email protected]>
DATA
Received: from example.prevent.server ([192.168.24..., _dataSize: 29792, _metaInfo: X-VONTU-SourceSystemFileName: RequestProcessor
X-VONTU-Channel: Inline SMTP
X-VONTU-MonitorId: 65,

Resolution

Remove the wildcard before the @ from the global and/or server-specific SMTP Protocol L7 filters, for example change *@company.com to @company.com.