Receiving red banner error when viewing incidents in the Enforce console

Products

• Data Loss Prevention Enforce

Issue/Introduction

Symantec Data Loss Prevention (DLP)

When viewing incidents a red error bar is presented with the following message:

An unexpected error has occurred. This could be due to one of the following: 1) Your session timed out and you selected a link that was no longer valid, 2) You used the browser back or forward button placing the system into an inconsistent state, or 3) The system experienced a temporary problem.

Besides the message in the red error bar, the following error is seen in the localhost logs:

java.lang.NullPointerExceptionjava.lang.NullPointerException

at com.symantec.dlp.policy.archive.PolicyArchiver.convertPolicyArchiveModelToPolicyArchiveJaxb(PolicyArchiver.java:165

Cause

This error is typically caused by using the 'Assign Group' button on the Policy List page. Any incidents that are triggered by a policy that has been assigned to a group in this way has the potential to experience this problem.

Environment

Data Loss Prevention 15.1 or 15.5

Resolution

This is resolved in DLP 15.5 MP1. If that is not an option it is also possible as a workaround using the below steps:

1. In Enforce, go to Manage > Polices > Policy List
2. Click into a policy with the problem
3. Change the current option in the 'Policy Group' drop down
4. Click Save
5. If desired, go back into the policy and change it back to the original policy group and save again

By doing the above steps it will update the policy properly and all future incidents won't exhibit the error message. The workaround will not fix the error on incidents that were created prior to performing the workaround steps, just for future incidents.