After upgrading the DLP Endpoint Prevent server from 15.7/15.8 to DLP 16.0 it stops reporting and its status stays on "Unknown". Restarting the services on both the Enforce and the Endpoint Prevent server does not resolve the issue.
DLP 16.0
MonitorController log shows the following error/s:
WARNING: Endpoint Channel mapper failed to auto provision the keystore for 'Detector Primary/Secondary' monitor. Error: Failed to auto provision the Detector Primo/Secundo-109-258 keystore for component EPS. Error:Failed to create keystore
The problem is the the forward slash "/" in the Endpoint Prevent server name. In DLP 16.0 whenever a jks keystore is created/autoprovisioned for an Endpoint Prevent server it will create the file with a name as specified in the name of the server. Since the name of the server contains a slash it will be wrongly interpreted by Windows as a directory structure separator.
The below is a workaround to address the issue ad-hoc to restore Endpoint Prevent server to normal operation.
Note: Renaming the server through the Console GUI will not resolve the issue as it only changes the display name but it's the unique identifier, which is the server's name at the time of adding, will remain the same.
Since 16.0RU1, you cannot add a detection server which contains the below character in the name:
<, >, :, ", /, , |, ?, *