NullPointerException while executing REST smart response action from Incident list page and the Incident Details Page
search cancel

NullPointerException while executing REST smart response action from Incident list page and the Incident Details Page

book

Article ID: 276169

calendar_today

Updated On:

Products

Data Loss Prevention Data Loss Prevention API Detection for Developer Apps Virtual Appliance Data Loss Prevention API Detection Virtual Appliance Data Loss Prevention Cloud Detection Service Data Loss Prevention Cloud Detection Service for ICAP Data Loss Prevention Cloud Detection Service for REST Data Loss Prevention Cloud Package Data Loss Prevention Cloud Prevent for Microsoft Office 365 Data Loss Prevention Cloud Service for Discovery/Connector Data Loss Prevention Cloud Service for Email Data Loss Prevention Cloud Storage Data Loss Prevention Core Package Data Loss Prevention Data Access Governance Data Loss Prevention Discover Suite Data Loss Prevention Endpoint Discover Data Loss Prevention Endpoint Prevent Data Loss Prevention Endpoint Suite Data Loss Prevention Enforce Data Loss Prevention Enterprise Suite Data Loss Prevention for Mobile Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard Data Loss Prevention Form Recognition Data Loss Prevention Network Discover Data Loss Prevention Network Email Data Loss Prevention Network Monitor Data Loss Prevention Network Monitor and Prevent for Email Data Loss Prevention Network Monitor and Prevent for Email and Web Data Loss Prevention Network Monitor and Prevent for Web Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Prevent for Email Virtual Appliance Data Loss Prevention Network Prevent for Web Virtual Appliance Data Loss Prevention Network Protect Data Loss Prevention Network Web Data Loss Prevention Oracle Standard Edition 2 Data Loss Prevention Plus Suite Data Loss Prevention Sensitive Image Recognition

Issue/Introduction

The DLP Environment was upgrade to DLP 16.0 MP2 Hotfix 1.
The incident remediation team attempts to execute a file restore via a smart response rules, from the incident list or incident snapshot page.
The request appears to be sent to the Cloud Connector but no response ever comes back from the Cloud Connector thus no file restore ever occurs.

Environment

DLP 16.0 MP2 Hotfix 1

Cause

When the smart response rule is executed from the Incident List or Incident Snapshot page a null pointer is generated in the MonitorController.log

Level: WARNING
Message:  Publishing to the connection ConnectionIdentifierId [hostName=gw.csg.dlp.protect.symantec.com, port=443] failed for the provider com.symantec.dlp.services.rest.RestDataObjectProvider
java.lang.NullPointerException
at com.symantec.dlp.services.rest.RestSPIRequestReader.getRestSPIRequestDataObject(RestSPIRequestReader.java:113)
at com.symantec.dlp.services.rest.RestSPIRequestReader$$FastClassBySpringCGLIB$$e70b282d.invoke(<generated>)....

 

The null reference impacts the rest response to the Cloud Connector causing the response to be incomplete and never attain a reply from CDS nor attain a successful File Restore.

Resolution

The fix is available in the following code releases:

  • Fixed issues in 16.0.1 MP1 (broadcom.com)
  • The public hotfix 16.0 MP2 HF5 is available in the software portal:
    • Symantec_DLP_16.0_MP2HF5_Platform_Lin-IN_16.0.00205.60297.zip
    • Symantec_DLP_16.0_MP2HF5_Platform_Win-IN_16.0.00205.60297.zip
  • The fix is already included in 16.0 RU2 
Powered by Wolken Software