SharePoint Discover scan fails to connect
search cancel

SharePoint Discover scan fails to connect

book

Article ID: 164363

calendar_today

Updated On:

Products

Data Loss Prevention Network Discover

Issue/Introduction

Data Loss Prevention (DLP) Network Discover SharePoint scan target fails, and logs show "CANNOT_CONNECT" and "connection timed out."

FileReader logs:

SEVERE: discover.statusMessage.CANNOT_CONNECT
com.symantec.dlp.sharepoint.connector.exception.SharePointBaseException: discover.statusMessage.CANNOT_CONNECT
Caused by: javax.xml.ws.WebServiceException: Could not send Message.

Caused by: java.net.ConnectException: ConnectException invoking https://{customer URL}/_vti_bin/SymantecDLP/DLPSPConnectorServices.asmx: Connection timed out: connect

Caused by: java.net.ConnectException: Connection timed out: connect

 

Cause

These errors may be caused by the Internet Explorer Enhanced Security Configuration being enabled on the SharePoint servers.  the Internet Explorer Enhanced Security Configuration is causing the Discover server to supply additional authentication information before it connects to the SharePoint solution connector, which the Discover is not coded to supply, thus causing the SharePoint connection to timeout waiting for a response from the Discover server.

Resolution

To confirm whether or not the Internet Explorer Enhanced Security Configuration is enabled, you can check (and modify to disable if necessary)  the registry keys:

  1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}\IsInstalled.  If the value is 1, then Internet Explorer Enhanced Security Configuration is enabled for users. If the value is 0 or the entry is not present, then Internet Explorer Enhanced Security Configuration is disabled for users.
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}\IsInstalled.  If the value is 1, then Internet Explorer Enhanced Security Configuration is enabled for administrators. If the value is 0 or the entry is not present, then Internet Explorer Enhanced Security Configuration is disabled for administrators

From: https://social.technet.microsoft.com/Forums/office/en-US/cae6bcc0-2f60-44e2-bbd0-23a27293ddd1/aboutinternet-being-blocked-by-internet-explorer-enhanced-security-configuration?forum=outlook

Another way to confirm Internet Enhanced Security Configuration on the Discover server is enabled, open Internet Options,  click on the Security Tab and click on Internet, then  Local Intranet.

                                                                  

If the Enhanced Security Confirmation is enabled, a pop-up window will open indicating the "Content from the website listed below is being blocked by the Internet Explorer Enhanced Security Configuration.

                                                                                     

 

This security setting must be disabled in order for the SharePoint scans to successfully run and complete.