Some incidents generated with two message body's result in a red banner error when attempting to open it in the Enforce console.
Article ID: 380510
Updated On:
Products
Issue/Introduction
In the Network Prevent for Email detection server, it was identified that mixed multipart mime types present during detection can lead to multiple bodies being detected for one email message.
As a result, when retrieving the incident from the database, a red banner error in the Enforce console appears when attempting to open it.
Environment
DLP 16.0.2
Network Prevent for Email
Cause
In the mime message decomposer there are a couple of places where body types can be created.
The Network Prevent for Email tries to create a single body and mark the others as attachments.
When the message has nested mixed multipart mimes since one of the routines which generates a bodies is static it doesn't track that the a body is already created therefore a second body may still be created as a result.
Resolution
A code fix has been released for this issue which is available in DLP 16.0 RU2 HF2 (16.0.20002.60107) and later versions which are available to download from the Broadcom product download page. Please upgrade to avail of the fix.
Feedback
