DLP Cloud Service Detector is unable to connect to Symantec CloudSOC

Products

• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Package

Issue/Introduction

A customer with newly licensed DLP Cloud Service Detector has configured it to connect to the Symantec CloudSOC (aka CASB) - but the connection does not appear to be successful as no traffic moves between the appliance and the server.

Environment

DLP Cloud Detection Service for CASB

Integrated with the CloudSOC Solution

Cause

There is a missing step prior versions of the documentation - and it failed to note that a DLP Appliance added to the CloudSOC needs to be activated in order to function.

Resolution

The Help Center topic for provisioning a CDS in CloudSOC does not mention that activation is required, but the configuration options to do so is still in place:

 

If the CDS is not activated, no detection can occur.

Once activated, the appliance should show as "connected" and detection can be tested successfully.
 

Additional Information

This step is required for an on-premises managed Cloud Detector. 

Cloud-managed detectors are activated automatically, once the overall services is enabled and the detector is provisioned in the CloudSOC Tenant.