Resolved issues
Forcepoint DSPM 4.2.1 Hotfix
Posted on Nov 12, 2026
DSPM 4.2.1 is a targeted hotfix release that improves scan reliability, performance, and stability. It delivers faster connector configuration for AWS S3, more efficient handling of Google Drive scans, and more dependable processing of large scans, including those of one million files or more. The release also corrects Microsoft Information Protection (MIP) sensitivity labelling behaviour and includes a security update to the PDF generator. No workflow changes are required.
| Key ID | Description |
|---|---|
| DSPM-13973 | Fixed a problem where the bucket and region lists in the Amazon S3 connector configuration could time out on AWS accounts with many buckets. The lists now load promptly, and each bucket shows its correct region. |
| DSPM-13513 | Google Docs, Sheets, and Slides files that cannot be downloaded are now skipped immediately during Google Drive scans instead of being retried. |
| DSPM-10806 | Long-running Google Drive scans now use memory more efficiently, so scans of large drives run reliably. |
| DSPM-13725 | Scan retries no longer repeat completed work, improving classification rates for large Google Drive scans. |
| DSPM-9452 | Large scans that filter out many files by download size now use memory more efficiently. |
| DSPM-13060 | Grafana monitoring now uses steady resources during large scans by recording certain metrics per scan instead of per file. |
| DSPM-13256 | Fixed a problem where a sensitivity label could be applied to a file when "Add / update MIP (Sensitivity) label" was not selected. Labels are now written only when that option is chosen. |
| DSPM-13971 | Updated PDF generator to address CVE-2026-111497 [CVE-2026-111497 is a critical, actively exploited flaw in the Brotli decompression library bundled with Node.js that can lead to a service crash or remote code execution]. |
| DSPM-13814 | Fixed a problem where OpenText ECM scans of folders containing shortcuts could complete successfully with 0 files found. These scans now report the correct file count, and shortcuts are skipped. |
| DSPM-13864 | Google Drive scans of domains with many users no longer rescan shared drives repeatedly. Each shared drive is now scanned once per scan, removing duplicate work. |
| DSPM-12937 | Google Drive discovery is significantly faster, particularly for shared-drive folders with many files, because file permissions and user identities are now retrieved in bulk and reused. |
| DSPM-13530 | Resolved a problem where files sent for reclassification were re-catalogued but never reclassified. Reclassification requests now complete and update each file's classification. |
| DSPM-13682 | Newly deployed environments now start with the default taxonomy, so Classification, Compliance and Distribution tags are available from first startup without manual setup. |