You are unable to connect from the Enforce server to the Oracle database using following command in SQLPlus: connect sys/password as sysdba
Executing this command using SQLPlus on any other server than the Oracle DB server will fail to connect.
In a 3-Tier installation (Oracle DB installed on a separate server to the Enforce), the connect command must include the Oracle DB server either using the alias defined in TNSNAMES.ORA or using the connection string from jdbc.properties.
See this article for more information: Test the Oracle database connection string used by DLP Enforce