A change in how LDAP server information is presented to the DLP Prevent and Monitor appliances by the ePO server causes this issue. In the 11.4 software, the LDAP server information was all pre-resolved by ePO. This design was because the ePO server was always local to the DLP Prevent or Monitor appliance. In this situation, the IP addresses are the same.

In NDLP 11.6, the ePO server might be local to the DLP appliance, but might also be running MVISION ePO. The LDAP servers might be unresolvable, or resolve to a different IP than the appliances would use. As a result, we changed the behavior of the 11.6 extension to provide the host names of the LDAP servers rather than the IP addresses.