Exception while loading the command instruction. CommandInstruction (11286, rest-response-dim-block)

Products

• Data Loss Prevention Enforce

Issue/Introduction

For this issue, the response rules have stopped working for Web Prevent. 

 

In addition, you find that the FileReader logs show the following type error: 

WARNING: Exception while loading the command instruction. CommandInstruction (11286, rest-response-dim-block). Loading other instructions. This exception may occur for REST channel specific response rules (REST channel is not supported on-prem but the policy may be global). Ignore if REST response rule.
com.vontu.command.CommandRuntimeException: Could not load class for command "rest-response-dim-block"

Environment

Release : 15.8

Component : DLP Web Prevent

Cause

The CASB/REST DLP detectors have unique jar files to handle this response rule. On premise detectors do not deploy with these special plugins so as a result, the FileReader can not find them. 

Resolution

Remove this response rule from on premise detectors. 

Best practice is to separate policy groups based on detection. Put policies in specific policy groups and only apply the correct detectors. For example, create a separate policy group for CASB only policies, and apply them to Cloud Detectors. Do not assign on premise detectors to them.