Red banner error when attempting to delete more than 1,000 DLP Endpoint agents at a time

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce

Issue/Introduction

You need to delete more than 1,000 Symantec Data Loss Prevention(DLP) Agents from the Enforce console at one time and are getting a red banner error. 

Environment

DLP 15.x

DLP 16.x

Cause

Default setting is to limit DLP Endpoint Agent tasks to 1,000 or less.

Resolution

1. On the Enforce server, edit the Manager.properties file. Default locations:
   WIndows: C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config
   Linux: /opt/Symantec/DataLossPrevention/EnforceServer/<version>/Protect/config
   
   
2. Look for this property: 
   • # The max number of agents that can be selected for task type DELETE
   • # com.vontu.manager.troubleshootingTask.maxTasks.DELETE = 1000
     
     
3. Un-comment the second line.
4. Adjust the value to the desired amount.
5. Save the changes.
6. Restart the Enforce server services.

Notes:
1. Increasing this setting above the default may cause performance issues in the Enforce console.
2. Initially while increasing the value, set it to 2,000 or 3,000 and test if it works as drastically increasing the value(ex. 120,000) may not work even though there is no upper limit.
3. By default, you can only select 200 agents at a time. If you would like to select more than 200 at a time, please modify the setting below in Manager.properties:
Look for this property: 

# The max number of agents that can be displayed per page on the new agent list page.
# com.vontu.manager.agentlist.maxshowallagents = 200

4. Un-comment the second line and set it as needed, however do not increase it drastically as it will impact performance.
5. Save the changes and restart the Enforce server services.

Additional Information

For a similar issue related to disable, see: Red banner error when attempting to disable more than 1,000 DLP Endpoint agents at a time