Incidents are not indicating username on DLP device

Products

• Data Loss Prevention
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Network Web

Issue/Introduction

 The error message in the syslogs is:

Unable to resolve ICAP XAUTH URI "WinNT://domain/User" using LDAP

Environment

Network Prevent for Web or Network Prevent for Web Virtual Appliance

Resolution

In the past we have seen these issues due to the base DN being too specific.

Change your base DN to a higher, more inclusive level, e.g.,

"DC=example,DC=com"

(replacing example and net with the correct values)

Incidents should now be reported with usernames.