Event Code 2317 - Failed to send email notification is seen in the DLP Enforce Console. The event is a Warning type event and the detail field will read. "Email notification was not sent for Incident xxxx and Policy xxxxxxxx. Unable to send incident notification; Please check the log for the error details."
From the Enforce tomcat localhost log, you will see the below error.
File: New folder (2)/localhost.2022-03-28.log
Date: 3/28/2022 3:12:34 PM
Thread: 91
Level: SEVERE
Source: com.vontu.command.CommandRuntime
Message: Error executing command: send-alert
Cause:
com.vontu.manager.mail.ReportMailerRuntimeException: An error occurred while emailing the report
javax.mail.AuthenticationFailedException
In addition from the History tab of the Incident snapshot page in the Enforce Console you will see the following message:
If customer is using an account without a password in the Enforce SMTP settings, below error is seen in the logs:
File: logs/debug/IncidentPersister_0.log
Date: 10/25/2023 1:10:16 PM
Level: WARNING
Thread: 3371
Source: com.vontu.incidenthandler.command.enforce.IncidentNotifier.sendEmail
Message: Error sending incident notification email
javax.mail.AuthenticationFailedException: failed to connect, no password specified?
15.8 and above
Authentication with the mail server is failing.
1. On Enforce Console, Navigate to System > Settings > General
2. Click on Configure
3. Under SMTP. Re-enter your SMTP server details, username and password.
4. Click on Save.
Ensure you are entering the correct username and password.
If the account being used does not have password, set a password for the account and configure as mentioned above.