RSOD observed after saving an Agent Configuration

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Enforce
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enterprise Suite

Issue/Introduction

When adding a domain filter under HTTP or HTTPS an RSOD may occur if the total length of the filter exceeds 1024 characters.

Environment

DLP 16.0

Cause

java.lang.reflect.UndeclaredThrowableExceptionjava.lang.reflect.UndeclaredThrowableException
Caused by: java.lang.reflect.InvocationTargetException
Caused by: java.lang.IllegalArgumentException: The parameter is too long.  The length cannot exceed 1024 characters.

java.lang.reflect.InvocationTargetExceptionjava.lang.reflect.InvocationTargetException
Caused by: java.lang.IllegalArgumentException: The parameter is too long.  The length cannot exceed 1024 characters.

Resolution

Update the HTTP or HTTPS filter to reduce the total character count to be less than 1024 total characters.

The limit has been increased to 4000 characters, starting DLP 16.0.1. Hence this only applies to DLP 16.0 and lower versions.

Additional Information

Endpoint Features in Data Loss Prevention 16.0.1

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/data-loss-prevention/16-0-1/about-what-s-new-in-dlp-16-01/endpoint-features-in-dlp-16-01.html