Hi,
I've got some very strange situation.
We upgraded two ESA's from 8.5.6 to 9.6 and now DLP is not working anymore. DLP's not catching DLP events - no DLP info can even be found in Tracking logs. Outbound mail is hitting right policy but no luck with DLP.
I found strange entries in DLP logs:
Fri Oct 16 23:34:03 2015 Warning: DLP: DlpAnalyzerInProcessSession::InitializeSession library: dbmatch - Error parsing configuration info needed for initialization. Check Session configuration.
Fri Oct 16 23:34:03 2015 Warning: DLP: DlpAnalyzerInProcessSession::InitializeSession library: fpmatch - Error parsing configuration info needed for initialization. Check Session configuration.
Fri Oct 16 23:34:03 2015 Warning: DLP: DlpAnalyzerInProcessSession::InitializeSession library: xfpmatch - Error parsing configuration info needed for initialization. Check Session configuration.
There are some customer regex used for DLP but I've validated all of them and all are ok.
What I also found very strange is that od "Current DLP Version files" page the "Update now" is greyed out. Columns Last update, Current version and New update have status "not known".
Updates for Sophos and Spam are ok.
Any idea what happened?