Red banner error when attempting to disable more than 1,000 DLP Endpoint agents at a time

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce

Issue/Introduction

You need to disable more than 1000 Symantec Data Loss Prevention(DLP) Agents from the Enforce console at one time and are getting a red banner error. 

Environment

DLP 15.x

DLP 16.x

Cause

Default setting is to limit DLP Endpoint Agent tasks to 1000 or less.

Resolution

1. On the Enforce server, edit the Manager.properties file. Default locations:
   WIndows: C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config
   Linux: /opt/Symantec/DataLossPrevention/EnforceServer/<version>/Protect/config
   
   
2. Look for this section: 
   • # The max number of agents that can be selected for  task type DISABLE
   • # com.vontu.manager.troubleshootingTask.maxTasks.DISABLE = 1000
     
     
3. Un-comment the second line.
4. Adjust the value to the desired amount.
5. Save the changes.
6. Restart the Enforce server services.

Note: Increasing this setting above the default may cause performance issues in the Enforce console.