I have a question regarding Ironport integration with DLP - the DLP vendor is stating that they want to monitor "posts" and not "gets". That's the terminology they are using. I'm trying to translate that into Ironport's terminology which is "do not scan any uploads" and "scan all uploads". I'm not sure which option to choose to get this done. Can anybody explain these options a little better than the online docs?
Thank you for your assistance!
Check your External DLP for any disconnects or network issues with the Ironport. The load-balance is only for multiple external DLP servers and not multiple Ironports.
Try to increase the reconnection attempts (10) to see if it helps. It would be best to find out why the Ironport can't reach the DLP servers during such time frames. Check for any symptoms around such times, like load or other service kicking off. Does it happen on exact time? These can give good hints as to why.