SEV - "This item is being archived by Enterprise Vault. Do not copy, move or delete this item".

Products

• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

Description:

Where Symantec Enterprise Vault (SEV) is integrated with CA DLP, the following warning message may be seen on messages downloaded from the iConsole:

"This item is being archived by Enterprise Vault. Do not copy, move or delete this item."

<Please see attached file for image>

The warning can appear for several reasons which are directly related to CA DLP:

The warning can appear if the message in the SEV archive was incorrectly set to have a "IPM.Note.EnterpriseVault.PendingArchive" message class. The message class is set by Symantec Enterprise Vault (SEV) and processed by DLP as it is presented. Consequently DLP captures the event in a "Pending Archive" state along with the associated warning message.

The warning message can also appear if the SEV plugin is installed on the Outlook client of the workstation the reviewer is using. The SEV plugin detects the message class and forces outlook to displays the warning message.

Solution:

These warnings do not require any action on the part of the DLP user.

Environment

Release:
Component: DLPARC