It would be very nice, that the DLP Agent SW can proactively monitor the risk of oversized two-tier check (from EDM rules) cache database file ttds.ead and limit two-tier processing before this file eats the whole system disk. I do not thinks it is an acceptable feature. (See http://www.symantec.com/connect/forums/ttdsead-very-large-can-be-deleted for same issue. Just "tested" on 11.6.3)
Thank you,
Pavel
