Network discover File system and Sharepoint scans do not pause as per the schedule or manually

Products

• Data Loss Prevention Network Discover

Issue/Introduction

You have setup a scan schedule for File system or Sharepoint scans to pause and resume at a certain interval. Post upgrading to 15.8 MP1, the scans do not pause and continue to run. If the scans are paused manually, they go into a 'Pause Requested' status and never pause.

Environment

DLP 15.8.x

Cause

The incremental index for the scan target is corrupt.

Resolution

Workaround:

In the Enforce console, navigate to Manage > Discover Scanning > Discover Targets. Hover the mouse over the specific scan target to find its scan assignment ID. Then follow the below steps on the Enforce and detection servers to delete the incremental indexes so that they are rebuilt on the next scan. Note that after deleting the incremental indexes, the first scan will be a full scan and once the incremental indexes are rebuilt, the subsequent scans will be incremental.

On the Detection server:

1. Stop the detection server service
2. Browse to \ProgramData\Symantec\DataLossPrevention\DetectionServer\15.8.00000\scan\incremental_index\MONITOR\TARGET_xx [Where xx is the target ID found earlier]
3. Backup all the contents inside the TARGET_xx folder to a location outside the DLP installation directory.
4. Delete only the contents of the TARGET_xx folder and not the folder itself
5. Start the detection server service.

On the Enforce server:

1. Stop the Symantec DLP Detection Server Controller service
2. Browse to \ProgramData\Symantec\DataLossPrevention\EnforceServer\15.8.00000\scan\incremental_index\MONITOR_CONTROLLER\TARGET_xx [Where xx is the same target ID for which the incremental indexes were deleted on the Detection server]
3. Backup all the contents inside the TARGET_xx folder to a location outside the DLP installation directory.
4. Delete only the contents of the TARGET_xx folder and not the folder itself
5. Start the Symantec DLP Detection Server Controller service

A private hotfix for 15.8 MP3 has been released to fix the issue.