This document is created for providing the symptoms of a well know issue.
DLP agent is deployed with SEE (Symantec Endpoint Encryption), DLP using the Endpoint flexresponse to Encrypt any sensitive data going out on the USB drive.
Once the file is copied say abc.doc, the DLP endpoint flex response gets executed and SEE prompt for the password to encrypt the file. However waiting for 20 seconds the SEE password windows again appears, after entering the password for second time , a abc.doc.xml file is created, and again waiting for 20 seconds one more SEE password windows appears, this time after entering the password 3rd file called abc.xml.xml gets created. This goes in loop and never stops until you stop providing the password to SEE windows.
Reason : VEP file optimization is not compatible with Symantec Endpoint Encryption software.
Go to System > Agents > Agent Configuration
Select your Agent Configuration, and go to Advanced Settings
Locate FileSystem.ENABLE_VEP_FILE_ELIMINATION.int
Set this to 1.
Setting the above configuration to 1 means you are enabling this setting which means the VEP files will not be generated in this situation. Setting to 1 Enables .vep file creation for scanned files moved to removable drives.