A long delay is present when opening/saving CSV and XLS files from a network share even though the share is excluded in the agent configuration

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Suite

Issue/Introduction

When opening or saving CSV or XLS files from a network share, a long delay is observed before the file finishes opening or saving. This occurs even when an ignore filter is added to the agent configuration for that share.

Environment

Release: 15.8, 16.0

Cause

The problem in this particular instance is that the share is a DFS share and not a standard CIFS share. As such, the filter path for the share does not match the actual share path and thus the share was not excluded. As the share was not excluded the agent has to create a copy of the file as an .snp file in the local agent temp directory. The process of creating this .snp file can drastically slow down the opening or saving of the network share file as described in Slow Performance when Opening and Saving MS Office files from Network Shares.

Resolution

If the share in question is indeed a DFS share then the filter path will need to be modified accordingly.

Instead of using a filter path like:

\\server_name\share_name\*

use the following path instead:

\\DfsClient\*\server_name\share_name\*

After saving the agent configuration, applying it to the agent group and waiting for the agent to be updated, performance for opening and saving the files on the share should be greatly improved.