DLP Directory Connection scans run a long time and never complete successfully.
The Localhost logs show "
timer fell behind the system clock" messages during the sync.
Symantec Data Loss Prevention 15.8.x
Directory Connection's can cause high CPU utilization on the Enforce server if large AD/LDAP directories are being scanned, resulting in scan failure.
Contact Symantec Support for the solution