Data Loss Prevention

 View Only
Expand all | Collapse all

DLP Flex Response failure after SMG upgrade to version 10.7.5-4

  • 1.  DLP Flex Response failure after SMG upgrade to version 10.7.5-4

    Posted Dec 05, 2021 07:04 PM
    We had DLP Flex Response working beautifully for years with our SMG.  We just upgraded our SMG from version 10.7.3 to version 10.7.5-4. We didn't make any configuration changes, all the certs are still in place, and valid, just like they were prior to the upgrade.   But Flex Response is now failing when trying to approve or reject quarantine incidents.

    FlexResponse Action Failed
    [Email Quarantine Connect Approve Action] failed with message: Input error when reading response from email gateway: java.io.IOException: Server returned HTTP response code: 500 for URL: https://gen0vmlxmgt01.citco.com:8443/brightmail/ws/DlpQuarantineActionsService


    05 Dec 2021 23:57:02,789- Thread: 176 SEVERE [com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectPlugin] Input error when reading response from email gateway: java.io.IOException: Server returned HTTP response code: 500 for URL: https://gen0vmlxmgt01.citco.com:8443/brightmail/ws/DlpQuarantineActionsService
    Cause:
    com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectException: Input error when reading response from email gateway: java.io.IOException: Server returned HTTP response code: 500 for URL: https://gen0vmlxmgt01.citco.com:8443/brightmail/ws/DlpQuarantineActionsServicecom.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectException: Input error when reading response from email gateway: java.io.IOException: Server returned HTTP response code: 500 for URL: https://gen0vmlxmgt01.citco.com:8443/brightmail/ws/DlpQuarantineActionsService
    at com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailWsRemediationSession.submit(EmailWsRemediationSession.java:166)
    at com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectRemediator.invokeWebService(EmailQuarantineConnectRemediator.java:39)
    at com.symantec.dlpx.flexresponse.emailquarantineconnect.EmailQuarantineConnectAction.execute(EmailQuarantineConnectAction.java:49)
    at com.vontu.incidentresponse.action.invoker.ActionInvoker.invokeActionAndPersistResults(ActionInvoker.java:272)
    at com.vontu.incidentresponse.action.invoker.ActionInvoker.invokeActionAndPersistResults(ActionInvoker.java:256)
    at com.vontu.incidentresponse.action.invoker.ActionInvoker.run(ActionInvoker.java:130)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:748)



    This sounds exactly the same as this article, but we have all the valid certificates in place.
    Error "FlexResponse Action Failed" when trying to release an email from quarantine
    Broadcom remove preview
    Error "FlexResponse Action Failed" when trying to release an email from quarantine
    Issue/Introduction Data Loss Prevention (DLP)Network Prevent for EmailSymantec Messaging Gateway (SMG) Emails are no longer being released from quarantine using the flex response and are stuck in the SMG.
    View this on Broadcom >


    What could this possibly be?

    Is anyone else here succesfully using Flex Response with SMG 10.7.5-4 ?






  • 2.  RE: DLP Flex Response failure after SMG upgrade to version 10.7.5-4

    Posted Dec 26, 2021 09:26 PM
    Hi Andrey,
    I fixed this by creating the SMG's certificate with the SMG IP.
    Give it a try.

    Regards,
    Eileen