Frequently Asked Questions (FAQ)
Endpoint DLP Data Classification
This generic error can result from several conditions during Document Matching template upload. Check the following in order:
Most Common Causes
- File contains fewer than 10 words: Document Matching requires the template file to contain at least 10 words. Verify your file meets this requirement.
- File is corrupted or unreadable: The upload may fail if the file is damaged, incomplete, or in an unexpected format. Re-save or re-create the file and try again.
- File format not supported: Only DOC, DOCX, and PDF files are supported. Verify your file is in one of these formats (not DOCM, XLSM, or other variants).
- PDF-specific issues:
- Password-protected or encrypted PDFs cannot be uploaded
- Scanned PDFs (image-only, no extractable text) may fail if fewer than 10 words can be extracted
- Malformed or corrupted PDF files may be rejected
- File size exceeds limit: Very large files (typically >100MB) may fail. Reduce file size and retry.
- Browser or network issue:
- Try uploading from a different browser or incognito/private mode
- Check your network connectivity
- Clear browser cache and cookies
- Server-side issue: If all above checks pass, contact ManageEngine support with:
- Browser console error details (press F12 → Console tab)
- Network request details showing the upload failure (F12 → Network tab)
- The file name, size, and format being uploaded
To Troubleshoot
- Verify file content: Open the file and confirm it contains at least 10 words
- Test with a simple file: Create a basic .docx file with 10+ words and attempt upload to isolate the issue
- Check browser console: Open F12 (Developer Tools) → Console tab to see if there are error messages
- Try different browser: Upload from Chrome, Firefox, or Edge to determine if the issue is browser-specific
Endpoint Central Document Matching accepts PDF files, but they must meet specific requirements.
PDF Requirements
- Minimum 10 words: The PDF must contain at least 10 extractable words
- Not password-protected: Password-protected or encrypted PDFs cannot be uploaded
- Extractable text: PDFs must have text that can be extracted (not image-only)
- Valid PDF format: The file must be a valid, non-corrupted PDF
- File size: Recommended maximum ~100MB (server configuration may vary)
Supported PDF Types
- Text-based PDFs: PDFs created from Word/Excel/PowerPoint or with embedded text
- PDFs with mixed content: Text + images are supported
- Scanned PDFs: Image-only PDFs without OCR are NOT supported. Scanned PDFs fail if they contain fewer than 10 extractable words
NOT Supported
- Password-protected PDFs (encrypted with a password)
- Digitally signed PDFs (may have extraction restrictions)
- Image-only/scanned PDFs without text extraction capability
- PDFs with restricted permissions (copy/extract disabled)
If Your PDF Upload Fails
For scanned PDFs: Apply OCR (Optical Character Recognition) using a tool like Adobe Acrobat or free online OCR services to convert the image to extractable text, then upload the OCR'd PDF.
For password-protected PDFs: Remove the password protection using a PDF editor, then upload.
For other issues: Verify the PDF is not corrupted by opening it in Adobe Reader or your browser. If it opens successfully with visible text, retry the upload.
Important Notes
- Endpoint Central does NOT perform OCR during upload. If you have a scanned PDF, you must apply OCR beforehand.
- The 10-word requirement applies to extractable text only. A PDF with 5 words + 5 images will fail.
- Match percentage in Document Matching is configured after upload and does not affect whether the upload succeeds.
Marking a file as sensitive when the file contents matches a RegEx pattern or a keyword/document is content-based classification.
Context-based classification classifies a file as sensitive, based on the file properties (password-protected or file extension-based) and the nature of the file origin (a file downloaded from an enterprise-marked application).
If a Regex pattern fails to detect expected values while keyword matching succeeds, check the following:
Common Regex Issues
- Word Boundary Mismatches:
- Pattern:
\b\d{3}-\d{6}\b(with word boundaries) - Problem: May not match if the pattern is adjacent to non-word characters or in specific contexts
- Solution: Test without word boundaries:
\d{3}-\d{6}
- Pattern:
- Pattern Syntax Differences:Endpoint Central uses standard Perl-compatible Regex (PCRE)
- Verify syntax:
\d(digit),\D(non-digit),\w(word char),\s(whitespace) - Character classes:
[0-9]is equivalent to\d - Quantifiers:
+(one or more),*(zero or more),{3}(exactly 3)
- Verify syntax:
- Anchors (^ and $):
^pattern$requires the entire line to match the pattern only- Solution: Remove anchors if the pattern appears anywhere in the file:
pattern
- Line-by-Line vs Full-Text Matching: Regex may process files line-by-line, not as continuous text
- If your pattern spans multiple lines, it may not match
- Solution: Test if the pattern appears on a single line in the file
- Occurrence Count Too High:
- If occurrence count is set to 5 but the pattern appears only 3 times, the file won't be classified as sensitive
- Solution: Lower the occurrence count or verify the pattern actually matches multiple times
- File Encoding Issues:
- UTF-8, ASCII, or other encodings may affect pattern matching
- Solution: Ensure the file is in UTF-8 or ASCII encoding
- Regex Not Deployed or Inactive:
- Verify the Regex rule is included in an active DLP policy
- Confirm the policy is deployed to the target endpoint
- Check policy refresh status (default 90 minutes)
Debugging Steps
- Create a minimal test file: Save a file with ONLY the value you're trying to match (e.g., "123-456789" on a single line)
- Deploy a DLP policy with your Regex rule to a test computer
- Test the file on that computer to see if it's classified as sensitive
- If it fails, try simplifying the regex:
- Original:
\b\d{3}-\d{6}\b - Simplified:
\d{3}-\d{6} - More permissive:
\d{3}\-\d{6}(escape the hyphen)
- Original:
- Check audit logs: Go to DLP → Reports → DLP Sensitive Events to see if the file was analyzed and which rule matched (or didn't match)
- Test with Keyword Matching as reference: If keywords work but Regex doesn't, the issue is likely Regex syntax or pattern scope
Common Pattern Examples (Tested)
| Pattern | Matches | Notes |
|---|---|---|
\d{3}-\d{6} | 123-456789 | Simple pattern without anchors (recommended) |
[0-9]{3}-[0-9]{6} | 123-456789 | Equivalent to above, using character class |
\d{3}\-\d{6} | 123-456789 | Hyphen escaped (sometimes needed) |
\b\d{3}-\d{6}\b | 123-456789 (with word boundaries) | More restrictive; may fail in some contexts |
Important: If multiple Regex patterns fail to detect values that Keyword Matching catches, the issue may be in how the file is being scanned, the encoding, or the pattern context. Provide the failing patterns, sample test files, and audit logs to ManageEngine support for deeper investigation.
Policy Association & Deployment
- Version 15.0.x
- Microsoft Outlook 2013
- Version 16.0.x
- Microsoft Outlook 2019
- Microsoft Outlook 2021
- Microsoft Outlook for Microsoft 365