Thanks for you response on providing a case number so I can look at your inquiries. I will make a suggestion on how you can get expedite service from our tech department, when you open a case, provide all relevant information/evidence so tech support can analyze it. For instance, the case you motioned, doesn't have a single piece of evidence, and neither a well explanation of what is it; "
Policy is not working as expected" is not enough to guess which DLP component is not performing as expected. I couldn't figure out what was the issue you were having from all the case information, so please be conscious about this and next tiem you open a case, I am pretty sure technical support will be helping you with troubleshooting DLP.
Things to be aware about technical support:
Technical support will assist with broken DLP components.
Technical support doesn't assist with policy authoring, configuration tuning, deployment, or upgrades/installation planning.
You can read Broadcom customer support policy here https://knowledge.broadcom.com/external/article?legacyId=TECH236428#policy
And if you need assistance authoring policies or configurations, Broadcom professional services will be the right department to talk to:
https://www.broadcom.com/support/symantec/services/consulting
When a case is related to a policy not working as expected, my suggestion is to provide the following information:
Export policy: design a single detection rule, no exceptions and no AD relations (group membership), and a single response rule if the response rule is the problem, otherwise no need for a response rule.
Provide the detection channel that is being tested, and show the channel is properly configured at the agent.
Enable agent log to FINEST, and make sure it took the configuration.
Use Broadcom real data for the test from DLPtest.com, unless it is custom data you are trying to find.
Test
Capture the Endpoint and Enforce server logs as well as agent for 7 days and upload to case.
Thanks, and good luck with your DLP
A.C.
Original Message:
Sent: 03-31-2020 12:01 PM
From: Ravikumar Bali
Subject: No resolution on DLP support Tickets
Hi Team,
I have opened couple of DLP support tickets and there has been no resolution from the support team even after multiple followups over the email. Is anybody else also facing the same challenges?