Red banner error when attempting to disable more than 1,000 DLP Endpoint agents at a time

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce

Issue/Introduction

You need to disable more than 1000 Symantec Data Loss Prevention(DLP) Agents from the Enforce console at one time and are getting a red banner error. 

Environment

DLP 15.x

DLP 16.x

Cause

Default setting is to limit DLP Endpoint Agent tasks to 1000 or less.

Resolution

If more than 1000 machines need to be disabled it is recommended to use a new agent configuration that has no channels selected in the channel filter and the default action is to ignore. This will effectively disable the agent and prevent any monitoring of data and prevent policy enforcement. The agent will continue to connect to the DLP environment incase a new agent configuration needs to be later deployed.

Additional Information