Endpoint Prevent for SMTP generates an incident but does not block the e-mail.
search cancel

Endpoint Prevent for SMTP generates an incident but does not block the e-mail.

book

Article ID: 176060

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

Symantec Data Loss Prevention (DLP) 
Endpoint Prevent

Using a Block SMTP e-mail response rule on the endpoint does generate an incident.
But it does not block the e-mail.

Environment

Reported on 15.1 MP2.
Can affect any version.

Resolution

The response rule was incorrect.
The customer used a Network Block rule.
Changed the rule to an Endpoint Block.
The e-mails are now blocked.