This Alert applies to Data Loss Prevention 14 deployments (both upgrades and new installations).
Symantec has identified issues with the external storage of incident attachments feature. When the feature is turned on, the migration of incident data will become stuck when 1000 incident attachments have been migrated. No additional incident attachments will be migrated. This applies to all incident types.
Additionally, the message bodies of Network incident types will no longer be available. This means that the message bodies will not be retrievable from the external storage system, and the message bodies are not visible in the Enforce Server administration console when you click the "Open Original Message" link in the incident snapshot. The message bodies are only recoverable from your backup of the Data Loss Prevention database.
If you have not turned on the external storage feature, do not turn it on (this includes selecting the option in the Upgrade Wizard when upgrading to version 14.0 or 14.0.1). Symantec can provide a hot fix that will enable you to use the feature. Contact Technical Support to obtain the hot fix.
If you have already enabled the feature, Symantec will provide a script that will allow the migration of incident data to external storage beyond 1000 incidents. Contact Technical Support if you have enabled the external storage feature.
Subscribing will provide email updates when this Article is updated. Login is required.