DLP Enforce console show the Endpoint agent as "connected" when the agent has disconnected.
Last Updated May 23, 2019
Your Symantec Data Loss Prevention (DLP) Endpoint agent is no longer connected to the network, however, the agent is still showing a status of "connected in the Enforce console.
There are two scenarios for which this could happen:
The Endpoint agent did not cleanly disconnect from the Endpoint Server. This can happen if the agent machine's network cable was unplugged, the agent service was not shut down cleanly, or the agent machine crashed.
The Endpoint server was shut down prior to the agent being shut down or disconnected from the network.
It can take several minutes for the Endpoint Server to recognize that the agent has been disconnected. The default time is 5 minutes. Wait for at least this long see if the status changes to disconnected. You can verify your configured interval by checking EndpointCommunications.HEARTBEAT_INTERVAL_IN_ SECONDS.int in the Advanced agent settings tab of your agent configuration.
If the Endpoint Server was shut down prior to the agent disconnect, Enforce shows stale data for that agent until the Endpoint Server is restarted and the agent reconnects to the Endpoint Server.
Imported Document ID: TECH220115
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe