EMDI not validating on endpoint

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent

Issue/Introduction

After creating an EMDI and adding it as an optional validator to a DI policy rule, no detection occurs. 

Agent logs show error:

Detection.EMDICheck | None of the profiles are loaded for this validator or no lookup are executed, failing open | EMDICheck.cpp(112)

Environment

This is applicable to versions 16.x and 25.x

Cause

EMDI is not turned on by default.

The EMDI index does not publish to the Endpoint Agent unless the parameter has been set in the Agent's Endpoint Detection Server's Protect.properties file.

Resolution

Verify that the parameter EMDI.EnabledOnAgents = true in the Protect.properties file on Endpoint Server, located: 

C:\Program Files\Symantec\DataLossPrevention\DetectionServer\[DLP verion]\Protect\config\Protect.properties

If this setting is still false, edit the Protect.properties file and set it to true.

Restart DLP service to pick up the change. 

Additional Information

This is applicable for 16.x and 25.x as outlined in the EDMI troubleshooting section of online help.

Example:
The EMDI index doesn’t get published to the Endpoint Agent
Properties File Settings for EMDI