DLP Directory Connection sync error

Products

• Data Loss Prevention Network Discover

Issue/Introduction

DLP Directory Connection scans run a long time and never complete successfully.

The Localhost logs show "timer fell behind the system clock" messages during the sync.

Environment

Symantec Data Loss Prevention 15.8.x

Cause

Directory Connection's can cause high CPU utilization on the Enforce server if large AD/LDAP directories are being scanned, resulting in scan failure.

Resolution

Contact Broadcom Support for the solution.