Converting LOB incidents to External Storage in DLP currently supported versions

book

Article ID: 209101

calendar_today

Updated On:

Products

Data Loss Prevention

Issue/Introduction

You want to convert LOB incidents to external storage after the installation of DLP is completed. 

Environment

Release : All currently supported DLP versions

Component : Enforce

Resolution

To configure external storage for incident attachments

1. On the Enforce Server host, open the following file in a text editor:

     Microsoft Windows: \Program Files\Symantec\DataLossPrevention\EnforceServer\15.7\Protect \config\Protect.properties

     Linux: /opt/Symantec/DataLossPrevention/EnforceServer/15.7/Protect/config/Protect.properties

2. Enable incident attachment external storage: com.symantec.dlp.incident.blob.externalize=true

3. Specify the path to the external storage directory: com.symantec.dlp.incident.blob.externalization.dir=

4. Save the file.

5. Restart the SymantecDLPManagerService and SymantecDLPIncidentPersisterService services.

 

To disable external storage for incident attachments If you choose to disable incident attachment external storage, be sure to preserve the setting that specifies the path to the external storage directory to ensure that the Enforce Server retains access to the incident attachments.

1. On the Enforce Server host, open the following file in a text editor:
    Microsoft Windows: \Program Files\Symantec\DataLossPrevention\EnforceServer\15.7\Protect \config\Protect.properties
    Linux: /opt/Symantec/DataLossPrevention/EnforceServer/15.7/Protect/config/ Protect.properties

2. Disable incident attachment external storage: com.symantec.dlp.incident.blob.externalize=false
Do not change or delete the parameter specifying the path to the external storage directory.

3. Save the file.

4. Restart the SymantecDLPManagerService and SymantecDLPIncidentPersisterService services.

Additional Information

Troubleshooting Destination Paths:

https://knowledge.broadcom.com/external/article/173583/error-1758-when-attempting-to-enable-inc.html