After upgrading Symantec DLP to version 15.8 MP3, Incidents are coming up and show an error tag in the message body:
[ICT_METADATA : ICT_TAG_NOT_SUPPORTED] PRIVATE
Note:
ICT tagging is not configured.
There have not been missed incidents because of this.
All of the inclusions are working correctly for MIP integrations & keyword detections.
This is really just a visual thing in the UI when viewing the incident.
Data Loss Prevention (DLP)
Release : 15.8 MP3
The tag can be ignored and this is working as designed.
Also setting "ContentExtraction.EnableMetaData off" for the email prevention server, the "ICT TAG NOT SUPPORTED" tag should no longer come up.