Description


General information specific to a DLP policy for Outgoing Emails. What they are and their action.


Please refer to MPmail Avanan - Setup DLP for a complete guide on how to set up DLP


The Process


DLP Workflows for Outgoing Emails

WorkflowDescription
Email is blocked. User is alerted and allowed to request a restore (admin must approve)

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email with an alert of the quarantine action.
  2. To view the original email, the user must request to restore the email.
  3. An administrator must approve the request.
Email is blocked. User is alerted and allowed to restore the email

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email with an alert of the quarantine action.
  2. The user can restore the original email without any administrator approval.
Email is allowed. Header is added to the emailAny detected email will be delivered to the recipient with additional header that is configured in the policy.
Do nothingAny detected email will be delivered to the recipient without any changes.
Microsoft Encryption Workflows
Email is blocked and user can resend as encrypted by MicrosoftAny detected email will not be delivered to the recipient and the user can resend the email as Microsoft encrypted email.
Email is allowed. Encrypted by MicrosoftAny detected email will be delivered to the recipient as encrypted by Microsoft and a header will be added to the email.
Email is blocked and user can request to resend as encrypted by Microsoft (admin must approve)

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email with an alert of the quarantine action.
  2. The user can request to resend as Microsoft encrypted email.
  3. An administrator must approve the request.
SmartVault Workflows
Email is blocked and user can resend as encrypted by SmartVaultAny detected email will not be delivered to the recipient and the user can resend the email as SmartVault email.
Email is allowed. Encrypted by SmartVaultAny detected email will be vaulted by SmartVault and the recipient receives a email notification. 
Email is blocked and user can request to resend as encrypted by SmartVault (admin must approve)

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email with an alert of the quarantine action.
  2. The user can request to resend as SmartVault email.
  3. An administrator must approve the request.


DLP Alerts for Outgoing Emails

You can configure alerts for outgoing emails detected to contain a DLP violation:

  1. Send notification email to specific recipients when DLP is detected. It is possible to customize email
    template using the gear icon next to the action.

  2. Send email alert to the sender when DLP Subject Regex pattern and DLP is detected in the email
    subject.

  3. Send email alert to the sender when DLP Subject Regex pattern is not detected but DLP is detected in the email subject.