ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Incident details for "Subject" line attribute is incorrect in the DLP Enforce console.


Article ID: 225071


Updated On:


Data Loss Prevention Data Loss Prevention Enforce CASB Gateway


In the Symantec Data Loss Prevention (DLP) Enforce console, the subject line in the incident details is not showing the correct subject. 
This is seen only with emails that have attachments.
And only in emails that go through CloudSOC (CASB).

For O365:
Incident details for risk in email body; Subject field is available and showing the correct subject
Incident details for risk in email attachment; Subject field is available and showing the incorrect subject

With an attachment, the subject line being displayed is for another email.

The correct information displays in CloudSOC but it is not passed to DLP.


Release: DLP 15.x and CASB versions prior to 3.139.


CASB engineering is targeting a fix in version 3.139 which is due for release in late October 2021.