Time mismatch between DLP Enforce and Detection Server

Products

• Data Loss Prevention Enforce

Issue/Introduction

After logging into the DLP Enforce console, an error occurs indicating that a time mismatch between Enforce and Detection Server exists. The error recommends automatic time synchronization. This issue affects the response rule block notifications from the Detection Server.

Code 2711 "Time mismatch between Enforce and Detection Server. It is recommended to fix the time on the Detection Server through automatic time synchronization."

Cause

There is a time difference between the DLP Enforce server and Detection Server. System clocks could be several hours apart or in a different time zone. The mismatch could be as small as 20 seconds.

Resolution

Check the system clocks on the DLP Enforce server and Detection Server. Verify if the system clock is synchronized between enforce and detection server. If the system clocks are not within several seconds of each other then make necessary adjustments.

If your JRE has not been updated lately, you may either need to update it or use the "Time Zone Updater" tool.

If the Enforce Server or Detection server is a VM, you may need to dedicate resources to the VM to give it more power like CPU time, also make sure updated VMware Tools are installed and running on the VM.