Error: "An unexpected error has occurred" when updating roles in Symantec Data Loss Prevention 25.1

Products

• Data Loss Prevention

Issue/Introduction

When editing a role that is (was) associated to a DLP user that has now been deleted, the system cannot save the end-user modifications of the role to the database. In a nutshell, this role cannot be changed/modified via the UI anymore.

Saving the role will fail with a RSOD:

An unexpected error has occurred. This could be due to one of the following: 1) Your session timed out and you selected a link that was no longer valid, 2) You used the browser back or forward button placing the system into an inconsistent state, or 3) The system experienced a temporary problem.

And the following tomcat stack trace:

Thread: 175 SEVERE [com.vontu.manager.spring.web.ManagerHandlerExceptionResolver] Unexpected exception while processing request:
Cause:
java.lang.NullPointerExceptionjava.lang.NullPointerException
    at java.base/java.util.Objects.requireNonNull(Unknown Source)
    at java.base/java.util.stream.Collectors.lambda$uniqKeysMapAccumulator$1(Unknown Source)
    at java.base/java.util.stream.ReduceOps$3ReducingSink.accept(Unknown Source)
    at java.base/java.util.HashMap$KeySpliterator.forEachRemaining(Unknown Source)
    at java.base/java.util.stream.AbstractPipeline.copyInto(Unknown Source)
    at java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(Unknown Source)
    at java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(Unknown Source)
    at java.base/java.util.stream.AbstractPipeline.evaluate(Unknown Source)
    at java.base/java.util.stream.ReferencePipeline.collect(Unknown Source)
    at com.symantec.dlp.enforcedomainservices.user.RoleApiService.reconcileUsers(RoleApiService.java:370)
    at com.symantec.dlp.enforcedomainservices.user.RoleApiService.updateAndPersistRole(RoleApiService.java:276)
... 

Cause

This issue is identified as a product defect (regression) in the 25.1 release, where specific role update operations trigger an unexpected error due to a mismatch in extraneous mapping records within the database.

Resolution

This issue is fixed in Symantec Data Loss Prevention 25.1 MP1 Hotfix 2 (Build 25.1.00102.60203) and higher.

To resolve this issue:

• Navigate to the Download Broadcom products and software portal.
• Search for Symantec Data Loss Prevention 25.1.
• Download and apply the 25.1 MP1 HF2 update.
• Verify the fix by attempting to update an existing role.
• If the error persists after applying the hotfix, please contact support for further investigation.