Random inconsistent unknown URL amongst multiple browsers including internet explorer

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Incidents with an unknown URL are created intermittently.

One minute it is working as expected, the next an unknown URL will surface. This is happening amongst all different web browsers.

Environment

DLP 15.5 and later versions have the ability to increase the timeout value.

Cause

Once an incident is triggered, the DLP agent reaches back out to try and identify the URL in use at the time of the incident.
If the time limit expires trying to retrieve the URL, the agent will fail open and send the incident with an unknown URL.

Resolution

• In the Enforce console go to System > Agents > Agent Configuration.
• Edit the applicable agent configuration.
• Go to the Advanced Settings tab.
• locate NetworkMonitor.URL_TIMEOUT.int
• The default value is 3000 milliseconds.
• Increase this variable to allow more time to retrieve the URL. You can start with 6000 or 9000.

Additional Information

If NetworkMonitor.URL_TIMEOUT.int is not an available option please contact support for assistance.