Using API via ICA you are unable to access the DLP enforce Incident service
Error accessing API
The HTTP service located at https://datalossprevention.int.xxxx.xxx/ProtectManager/services/v2011/incidents is unavailable. This could be because the service is too busy or because no endpoint was found listening at the specified address. Please ensure that the address is correct and try accessing the service again later
You are trying to access the following Enforce URLs
https://datalossprevention.int.xxxx.xxx/ProtectManager/IncidentDetail.do?value(variable_1)=incident.id%26value(operator_1)=in%26value(operand_1)=#VALUE#
https://datalossprevention.int.xxxx.xxx/ProtectManager/services/v2011/incidents
https://datalossprevention.int.xxxx.xxx/ProtectManager/DownloadAttachment.do?crackedmessageID=#MESSAGECOMPONENTID#&incidentID=#INCIDENTID#
The localhost log contains these entries:
Level: SEVERE
Source: com.symantec.dlp.login.spring.EnforceAuthenticationServiceBase
Message: Account for user xxxICAxxx is locked
Level: WARNING
Source: com.symantec.dlp.login.spring.SymantecFormAuthenticationProvider
Message: Form based authentication failed: username=xxxICAxxx
Level: WARNING
Source: com.symantec.dlp.login.spring.SymantecKerberosAuthenticationProvider
Message: Kerberos authentication failed: user=xxxICAxxx
Release: 15.8 MP3
The user "xxxICAxxx" is the ICA account being used for the API.
The problem was on the ICA user account ID, it was not entered properly.