Incidents not captured in the Gmail message body when using Firefox

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Enforce
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Prevent for Web
• Data Loss Prevention Network Protect
• Data Loss Prevention Endpoint Discover

Issue/Introduction

SPDY may prevent incidents from getting captured by DLP using application such as Gmail.

None

Cause

It has been observed that Gmail uses new protocol called SPDY to transfer its content. Till Firefox 12.0 support of SPDY was disabled by default, but from Firefox 13.0 SPDY is enabled by default because of that content fetched by Firefox hook is not recognized by HTTP parser and it does not get blocked.

Resolution

Starting in version 14.0, DLP has added the feature to auto disable SPDY. This is covered in DOC8788

The SPDY protocol can be enabled and disabled using the
NetworkMonitor.DISABLE_SPDY_PROTOCOL.int setting on the Advanced
Agent Settings screen.

For DLP versions prior to 14.0, refer to TECH219417.