KB Article | Forcepoint Support

Problem Description

When Data Security Discovery tasks on Samba file systems are configured to preserve the original access time, there are errors reported that the access time could not be reverted.


Default installations of Samba limit the ability to change the "last access time" property of a file. When Data Security is configured to restore the last access time to its original value, it is unable to do so, which results in error messages.  It is not necessary to revert the last access time on Samba file systems because this value is not modified when Discovery is performed.

As a best practice, do not check the option of preserving access time in discovery tasks for Samba file systems. Leaving this option unchecked will still preserve the original access time, but it will not produce any errors.

The Preserve original access time option is located on the Advanced page of the discovery setup wizard under File access timestamp. The steps are as follows:
  1. Open the Data Security Management UI.
  2. Navigate to Main > Policy Management > Discovery Policies > Manage Network Tasks.
  3. Select the task that performs Discovery on your Samba file system.
  4. Click Edit.
  5. Proceed to the Advanced step in the Discovery setup wizard
  6. Uncheck the option to Preserve original access time.
  7. Click Deploy.
  8. Rerun the Discovery task, either manually by clicking the Start button on the Discovery task overview, or automatically at the scheduled time.
For more information on configuring discovery tasks, see the topic Performing File System Discovery in the Technical Library.

Keywords: DLP Data Security Discovery; Samba File System Discovery; Preserve Original Access Time; Could Not Preserve; Discovery Issue; Error Message; UI Issue;

Article Feedback

Thank you for the feedback and comments.