VuGen LoadRunner recording fails when DLP is installed

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

When trying to use the Micro Focus VuGen/LoadRunner development tool to record scripts, the recording fails when it logs the DLP brkrprcs64.exe

Steps to reproduce:

1. Launch VuGen on a workstation.
2. Navigate to File > New Script and Solution > Single Protocol > Web - HTTP/HTML > Create
3. Select the Record button at the top of the screen > In the pop up window, set the Application to either Microsoft Edge or Google Chrome > set a URL address (like https://dlptest.com/https-post/) > start recording.
   
4. Vugen only reports the brkrprcs64.exe
   
   Record log from Vugen:
   [API Trapper ( ad0:1c24)] Recording in 64-bit mode: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
[API Trapper ( 3a0: 408)] Recording in 64-bit mode: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
[API Trapper (1de4:2738)] Recording in 64-bit mode: C:\Windows\system32\cmd.exe
[API Trapper (29c4:1914)] Recording in 64-bit mode: C:\Program Files\Manufacturer\Endpoint Agent\brkrprcs64.exe
[API Trapper (1a54:2a38)] Recording in 64-bit mode: C:\Windows\system32\cmd.exe
[API Trapper (11e8:2aac)] Recording in 64-bit mode: C:\Program Files\Manufacturer\Endpoint Agent\brkrprcs64.exe

VuGen exe's have been whitelisted in DLP.

Environment

Symantec Data Loss Prevention 15.7 MP3
Symantec Data Loss Prevention 15.8 MP3
VuGen 2021 R1

Cause

Microfocus has not certified VuGen to work with Symantec DLP at this time.
VuGen dll's are unable to hook into the browser process properly when the DLP broker process (brkrprcs64.exe) is enabled.

Resolution

Workarounds:
1. Turn off the web browser HTTPS monitoring in the DLP Agent Configuration assigned to the workstation.
2. or, Use "Remote Application vis LoadRunner Proxy" instead of "Web Browser" for the VuGen Recording setting.