Error "javax.net.ssl.SSLHandshakeException: no cipher suites in common" is seen in logs and detection server shows up as unknown

Products

• Data Loss Prevention

Issue/Introduction

Detection server shows up as unknown and you see error "javax.net.ssl.SSLHandshakeException: no cipher suites in common" in Box Monitor logs.

Resolution

On the Detection Server, navigate to the following directory:
C:\Program Files\Symantec\DataLossPrevention\DetectionServer\16.1.00000\Protect\config

Open the EnforceConnectorCommunication.properties file using a text editor.

Backup the current setting by commenting it out—add a # at the beginning of the existing line.

Add the following new line just below the commented line:

SSLcipherSuite = TLS_RSA_WITH_AES_128_CBC_SHA256

or update uds.ssl.cipher.suites.list with the missing cipher suite present on cipher suite list for UDS on Enforce Server in monitorcontroller.properies:

uds.ssl.cipher.suites.list = TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Save the file and restart at least Symantec DLP Enforce Connector Service.

After restarting, verify that the changes have been applied successfully.