Symantec Cloud DLP IP's are causing soft fail errors in Exchange Online

Products

• Data Loss Prevention Cloud Service for Email

Issue/Introduction

From a technical view, some customer environments with specific SPF record setups, downstream from DLP may observe soft fail errors in exchange online after reflect mode in DLP has been configured in front and backend.

Environment

Release : 15.x

Component : DLP Cloud Service for Email

Cause

Modifications to SPF records are not typically needed for Reflect Mode detectors for DLP Cloud Service for Email, once configured backend and in DLP. 

Resolution

Some custom environments may require adding DLP GCP Cloud Service IP range (144.49.240.0/21) to their SPF records for their domains in their DNS to avoid soft fail errors in Exchange Online Protection (O365 or M365) downstream from DLP.