Resolved issues

Released on Nov 03, 2026

Cloud DSPM 4.2.1 is a hotfix release that improves scan reliability, performance, and stability. It delivers faster connector configuration for AWS S3, more efficient handling of Google Drive scans, and more dependable processing of large scans. The release also corrects Microsoft Information Protection (MIP) sensitivity labeling behavior and includes a security update to the PDF report generator. No workflow changes are required.

ID	Fix
DSPM-13973	Fixed an issue where the bucket list could time out when configuring the AWS S3 connector on accounts with many buckets. The bucket list now loads quickly, and each bucket shows its correct region.
DSPM-13513	Fixed an issue where files that Google Drive would not allow to be downloaded were retried repeatedly, which delayed scans. These files are now skipped once without retries, and native Google files export correctly.
DSPM-10806	Fixed an issue where large Google Drive scans could fail because the connector ran out of memory. Connector memory use is now stable, so large scans complete without interruption.
DSPM-13725	Fixed an issue where large scans could slow down or stall when failed folders were retried, for example because of throttling. Failed folders are now retried one at a time without flooding the scan queue.
DSPM-9452	Fixed an issue where the content extraction service could restart during large scans that filter out many files. The service now keeps stable memory use regardless of scan size.
DSPM-13256	Fixed an issue where a Microsoft (MIP/AIP) sensitivity label could be written to files tagged with Cloud and persistent tagging, even when Add / update MIP (Sensitivity) label was not selected. Labels are now written only when that option is selected. If you use sensitivity labels, review files that were tagged before this update to confirm their labels are as you intended.
DSPM-13971	Updated the PDF report generator to address CVE-2026-111497, a critical vulnerability in a software component it used. The component has been updated to a patched version.
DSPM-13814	Fixed a problem where OpenText ECM scans of folders containing shortcuts could complete successfully with 0 files found. These scans now report the correct file count, and shortcuts are skipped.
DSPM-13864	Google Drive scans of domains with many users no longer rescan shared drives repeatedly. Each shared drive is now scanned once per scan, removing duplicate work.
DSPM-12937	Google Drive discovery is significantly faster, particularly for shared-drive folders with many files, because file permissions and user identities are now retrieved in bulk and reused.
DSPM-13530	Resolved a problem where files sent for reclassification were re-catalogued but never reclassified. Reclassification requests now complete and update each file's classification.
DSPM-13682	Newly deployed environments now start with the default taxonomy, so Classification, Compliance and Distribution tags are available from first startup without manual setup.

Posted on Oct 06, 2026

Improved pattern matching to handle heavy loads automatically, speeding up classification and reducing failures.
Dropbox file paths now appear as clickable links instead of plain text, so you no longer need to copy and paste paths to locate files.
Fixed a performance issue where service restarts during long-running scans gradually increased CPU usage and slowed classification.
Fixed an issue where the pattern-matching service repeatedly restarted, causing intermittent scan slowdowns.
Fixed an issue where a scan could remain stuck in "In Progress" after a database connection error, with no error message and no way to resolve it other than cancelling the scan. The scan now completes and reports the error.
Fixed an issue where SMB file shares that use case-sensitive naming could fail to connect, preventing those shares from being scanned.
Fixed an issue where temporary internal cache problems could slow or disrupt Google Drive scans.
Fixed an issue where Dropbox scans repeatedly retried folders that no longer existed, slowing overall scan progress.
Fixed an issue where searching a SharePoint Online site returned no results and displayed "No data" instead of an error message.
Fixed an issue where recorded Teams meetings with only internal participants were incorrectly flagged as externally shared, inflating external-sharing risk counts.
Fixed an issue in Enterprise Search where the "Download URL" column was missing from the column picker and from exported file results.
Fixed an issue on the Endpoint Management page where searching for agents by version with "not equal" or other comparison operators returned an error instead of results.

Posted on Aug 31, 2026

Improved automatic throttling recovery for Microsoft connector content downloads to prevent repeated request failures and scans from getting stuck during datasource throttling.

Posted on Aug 17, 2026

Posted on Aug 12, 2026

Fixed an issue where OneDrive/SharePoint discovery scans could be interrupted when Microsoft Graph API throttling occurred.
Enterprise Search now displays the classification tag alias rather than the underlying tag name after a manual classification edit.
Corrected the externally shared flag for the SharePoint Online service account permission, which was incorrectly reported as externally shared.
Fixed the Enterprise Search results table showing null or incorrect created/modified dates. Stored data and exports were always correct; this was a display-only issue.
Restored the Trustee Name and Trustee Login Name columns in Enterprise Search, they populate correctly in both the on-screen table and the export.
Fixed a race condition in discovery that could cause it to become stuck under heavy throttling as observed for OneDrive and SharePoint Online scan.
Corrected the retry classification for throttling and lock errors (423/429); the number of retries was modified to correctly handle the throttling errors.
Added exponential backoff and recovery mechanism to prevent scan errors and scans left open indefinitely.
Fixed manual classification edits inserting a stray apostrophe into hyphenated labels (for example, Highly Confidential). Labels are now stored exactly as selected.
The "Incomplete" discovery status reflected a temporary display state that appeared while the discovery scan was still in progress. It has since been updated to display as "In Progress" for clarity.
Fixed the DLP Rule Names column in the Enterprise Search export. It no longer shows an unreadable object or populates entries for files without a DLP match. The column now displays the rule name or remains empty when no rule matches.
Improved FDC agent connection reliability when PDF configuration is disabled.

ID	Fix
DSPM-7042	Fixed an issue that prevented SharePoint Online scans from discovering files when specific permission types, including shared links and group permissions, were present.
DSPM-1516	Implemented parallel processing for pattern-matching (Regexes) to improve performance.
DSPM-1515	Fixed an issue where classification tags were not applied when tagging PDF files.
DSPM-1234	Fixed an issue where classification results could be inconsistent when multiple classification rules matched the same file.
DSPM-1226	Fixed file lineage lookup functionality that was broken for Google Drive, Box, Dropbox and Slack.
DSPM-1225	Fixed an issue where persistent tagging failed for Microsoft Visio files.
DSPM-1115	The file tagging action, previously unavailable on the Data Sources page, has now been restored. Users can now tag files directly from the Data Sources interface without needing to navigate to the Enterprise Search page.
DSPM-1114	Removed duplicate detector menu item from DSPM console left navigation panel.
DSPM-973	Users can now create, save, and view up to 30 departments in the Policy Center UI—increased from the previous 20-department limit.
DSPM-965	Fixed Email Notification validation functionality.
DSPM-848	Restored Confidence scores to Compliance Tags and Data Attributes in CSV and JSON exports.
DSPM-845	Fixed content extractor timeout overrun issue causing excess failures in content extraction.
DSPM-784	Fixed an issue where trustee scans remained stuck in the In Progress state after transient errors occurred. Scans now correctly log errors, retry processing, and update their status to FAILED or INCOMPLETE as appropriate.