How to troubleshoot Directory Group Matching for Detection Servers in DLP v11.x

book

Article ID: 160282

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

After configuring a policy with a Directory Group matching condition, it does not work as expected on a DLP v11.x detection server.

Resolution

1. Ensure the policy works without the Directory Group condition.
2. Verify the user you are testing with is indeed in the Active Directory group.
3. Ensure the Group Directory index job has run successfully since making any group membership changes.