After installing 16.0 MP1, EDM policies generate incidents for any EDM index match regardless of the configured minimum match count

Products

• Data Loss Prevention Enterprise Suite
• Data Loss Prevention Enforce
• Data Loss Prevention
• Data Loss Prevention Core Package

Issue/Introduction

After installing 16.0 MP1, you find that EDM policies generate incidents for any EDM index match regardless of the minimum match count setting configured for the EDM.

Environment

Release : 16.0 MP1

Cause

A change in how our detection engine records the MatchType of EDMs was realized in MP1, and this created the issue described.

Resolution

A fix for this issue was included in the latest 16.0MP1 Hotfix, which is available on the Broadcom portal.

Go to Primary Downloads and find the "Data_Loss_Prevention_16.0_HF_Server" section, and download the following file as appropriate for your DLP server(s):

• Symantec_DLP_16.0_MP1_Platform_Lin-IN_16.0.00101.60099.zip
• Symantec_DLP_16.0_MP1_Platform_Win-IN_16.0.00101.60099.zip

Follow instructions in the Read Me for installation.

Additional Information

After applying the hotfix you can delete old incidents which did not honor the minimum match count settings (they are not deleted automatically by applying the hotfix).