Intermittently, FlexResponse is not able to release emails from quarantine on the SMG.
The "manager_operational" log has this entry when the release fails:
Level: SEVERE
Source: RESPONSE_ACTION.12
Message: FlexResponse Action [Email Quarantine Connect Approve Action] failed with message: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake.
The localhost log has these entries at the same time:
Level: SEVERE
Source: com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectPlugin
Message: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
Cause:
com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshakecom.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
Level: SEVERE
Source: com.vontu.incidentresponse.action.invoker.ActionInvoker
Message: (RESPONSE_ACTION.12) FlexResponse Action [Email Quarantine Connect Approve Action] failed with message: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake.
Release: DLP 15.8 MP3
SMG 10.7.5
The SMG was responding poorly to attempts to open the Control Center.
It would either not respond at all or it would take at least a minute to open.
After restarting the SMG the Control Center responded normally.
We monitored DLP for a week and no new instances of the FlexResponse failing to release from quarantine were noticed.