Change the Data Loss Prevention(DLP) Enforce console session timeout settings
Article ID: 160528
Updated On:
Products
Issue/Introduction
You are automatically logged out of the Enforce console after 30 minutes of inactivity and receive the message: "Your session has expired and you will be logged off".
Resolution
Relevant Versions:
DLP Versions 15.8 and above:
Windows
C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<version>\Protect\tomcat\webapps\ProtectManager\WEB-INF\web.xml
/opt/SymantecDLP/Protect/tomcat/webapps/ProtectManager/WEB-INF/web.xml
<session-config>
<session-timeout>30</session-timeout>
</session-config>
Change the default settings from: 30 to 600 (from a half-hour to 10 hours)
<session-config>
<session-timeout>600</session-timeout>
</session-config>
Linux:
to find the web.xml you can run the following find command:
find / -iname web.xml -type f -ls <session-config>
<session-timeout>30</session-timeout>
</session-config>
Change the default settings from: 30 to 600 (from a half-hour to 10 hours)
<session-config>
<session-timeout>600</session-timeout>
</session-config>
In addition, you must also increase the lock timeout to the equivalent time in milliseconds:
http://www.calculateme.com/Time/Minutes/ToMilliseconds.htm
To increase the lock timeout :
- DLP versions 15.8 and above:
Change model.lockserver.locktimeout in
C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config\Model.properties
/opt/Symantec/DataLossPrevention/EnforceServer/<version>/Protect/config/Model.properties
CHANGE DEFAULT FROM:
model.lockserver.locktimeout = 1800000
TO:
model.lockserver.locktimeout = 36000000
Restart all Symantec DLP services on the Enforce server.
NOTE: Never adjust the UI session timeout without setting the lock timeout to the same value. Otherwise the application behavior may be nondeterministic.
To find the Model.properties file in Linux use the same find command above. Change web.xml to Model.properties
find / -iname "Model.properties -type f -ls
Feedback
