Network Discover SharePoint file Quarantine is failing
search cancel

Network Discover SharePoint file Quarantine is failing

book

Article ID: 184274

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover Data Loss Prevention

Issue/Introduction

Set up a Data Loss Prevention (DLP) Policy response rule to quarantine sensitive files found with SharePoint Discover Scans.

File: Enforce/logs/tomcat/localhost.log

Thread: 117
Level: SEVERE
Source: com.symantec.dlp.sharepoint.connector.exception.SharePointExceptionHandler
Message:  Got 401 response code, invalid credentials.
Cause:
com.symantec.dlp.sharepoint.connector.exception.InvalidCredentialException: Got 401 response code, invalid credentials.
javax.xml.ws.WebServiceException: Could not send Message.
org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized' when communicating with servername/_vti_bin/SymantecDLP/DLPSPConnectorServices.asmx
com.symantec.dlp.sharepoint.connector.exception.InvalidCredentialException: Got 401 response code, invalid credentials.
                at com.symantec.dlp.sharepoint.connector.exception.SharePointExceptionHandler.throwException(SharePointExceptionHandler.java:56)
                at com.symantec.dlp.sharepoint.connector.exception.SharePointExceptionHandler.throwException(SharePointExceptionHandler.java:83)
                at com.symantec.dlp.sharepoint.connector.soap.SharePointSOAPWSInvoker.getSiteCollectionURLs(SharePointSOAPWSInvoker.java:359)

Environment

DLP 14.6 MP1
SharePoint 2013

Cause

Reviewed Sharepoint quarantine configuration on the Enforce. 
Looked at jcifs.properties, the jcifs.smb.lmCompatibility setting was set to 1 and should be set to 3.

Resolution

Set the jcifs.smb.lmCompatibility setting to 3. 
Quarantine should now work as expected.