DLP Event Code 2317 - "Failed to send incident email notification" when SMTP notifications use anonymous auth

Products

• Data Loss Prevention
• Data Loss Prevention Enforce
• Data Loss Prevention Core Package

Issue/Introduction

Event Code 2317 - Failed to send email notification is seen in the DLP Enforce Console. The event is a Warning type event and the detail field will read. "Email notification was not sent for Incident xxxx and Policy xxxxxxxx. Unable to send incident notification; Please check the log for the error details."

 

From the Enforce tomcat localhost log, you will see the below error. 

File: New folder (2)/localhost.2022-03-28.log
Date: 3/28/2022 3:12:34 PM
Thread: 91
Level: SEVERE
Source: com.vontu.command.CommandRuntime
Message: Error executing command: send-alert
Cause:
com.vontu.manager.mail.ReportMailerRuntimeException: An error occurred while emailing the report
javax.mail.AuthenticationFailedException

In addition from the History tab of the Incident snapshot page in the Enforce Console you will see the following message:

If customer is using an account without a password in the Enforce SMTP settings, below error is seen in the logs:

File: logs/debug/IncidentPersister_0.log
Date: 10/25/2023 1:10:16 PM
Level: WARNING
Thread: 3371
Source: com.vontu.incidenthandler.command.enforce.IncidentNotifier.sendEmail
Message: Error sending incident notification email
javax.mail.AuthenticationFailedException: failed to connect, no password specified?

Environment

Any supported DLP version

Cause

Authentication with the mail server is failing. This can be caused by invalid entries in the SMTP section, including invalid user ID or password.Or, if there is no user ID or password specified, the SMTP server may not allow anonymous access.

Resolution

1. In the Enforce Console, navigate to System > Settings > General
2. Click on Configure
3. Under the SMTP section, re-enter your SMTP server details, username and password.
4. Click on Save.

Ensure you are entering the correct username and password.

If the account being used does not have a password, set a password for the account and configure the SMTP settings as mentioned above.