Red banner error when attempting to issue change server command to more than 1,000 DLP Endpoint agents at a time

Products

• Data Loss Prevention Enterprise Suite

Issue/Introduction

You need to issue change server command to more than 1000 Symantec Data Loss Prevention(DLP) Agents from the Enforce console at one time and you are getting a red banner error. 

Environment

DLP 15.x

DLP 16.x

Cause

Default setting is to limit DLP Endpoint Agent tasks to 1000 or less.

Resolution

1. On the Enforce server, edit the "Manager.properties" file. Default location:
Windows: C:\Program Files\Symantec\DataLossPrevention\EnforceServer\<version>\Protect\config

Linux: /opt/Symantec/DataLossPrevention/EnforceServer/<version>/Protect/config

2. Look for this section:

# The max number of active tasks of type CHANGE_SERVER_LIST
# com.vontu.manager.troubleshootingTask.maxTasks.CHANGE_SERVER_LIST = 1000

3. Un-comment the second line.

4. Adjust the value to the desired amount.

5. Save the changes.

6. Restart the Enforce server services.

Note: Increasing this setting above the default may cause performance issues in the Enforce console.