Email is delayed by the Outlook Add-in for Mac

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

• You have deployed the Oulook Add-in for Mac per the instructions in the Monitoring Microsoft Outlook Emails Using the Web Add-in on Windows and macOS Endpoints section of the Symantec Data Loss Prevention Help Center
• You now see the message “Symantec for Outlook is working on your request” for two to three seconds after clicking the Send button on a message in Outlook

Environment

Release : 15.x, 16.x

Component : Outlook Add-in for Mac OS

Resolution

The product is working as designed. A delay of two to three seconds for this activity is normal.

• The message is generated by Outlook; not by the DLP add-in.
• The message cannot be customized or suppressed via DLP configuration.

Additional Information

DLP offers two types of monitoring for Outlook:

1. Add-in

Add-in monitoring is a newly developed solution for DLP versions 15.x through 16.x. The add-in must be deployed from the O365 Administration Center and requires the following:

• O365 mailbox 
• Outlook version16.30 or greater

NOTE: This is the only detection mechanism available for macOS 11 and later.

NOTE: See this advisory for details concerning support for the new Outlook mode (see screenshot).

2. Hooking/injection

Hooking-based monitoring is a legacy DLP solution in which DLP hooks into the Outlook application directly and monitors outgoing e-mail.

 

In DLP 15.8 and later releases, the monitoring technique can be controlled by the following advanced agent settings:

• Outlook.MONITOR_TECHNIQUE= 1 : enables add-in-based monitoring
• Outlook.MONITOR_TECHNIQUE= 0 : enables hooking-based monitoring

NOTE: This method is unavailable for macOS 11 and later.