Description
General information specific to a DLP policy for Outgoing Emails. What they are and their action.
Please refer to MPmail Avanan - Setup DLP for a complete guide on how to set up DLP
The Process
DLP Workflows for Outgoing Emails
Workflow | Description |
Email is blocked. User is alerted and allowed to request a restore (admin must approve) | Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox. - The user receives an email with an alert of the quarantine action.
- To view the original email, the user must request to restore the email.
- An administrator must approve the request.
|
Email is blocked. User is alerted and allowed to restore the email | Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox. - The user receives an email with an alert of the quarantine action.
- The user can restore the original email without any administrator approval.
|
Email is allowed. Header is added to the email | Any detected email will be delivered to the recipient with additional header that is configured in the policy. |
Do nothing | Any detected email will be delivered to the recipient without any changes. |
Microsoft Encryption Workflows |
Email is blocked and user can resend as encrypted by Microsoft | Any detected email will not be delivered to the recipient and the user can resend the email as Microsoft encrypted email. |
Email is allowed. Encrypted by Microsoft | Any detected email will be delivered to the recipient as encrypted by Microsoft and a header will be added to the email. |
Email is blocked and user can request to resend as encrypted by Microsoft (admin must approve) | Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox. - The user receives an email with an alert of the quarantine action.
- The user can request to resend as Microsoft encrypted email.
- An administrator must approve the request.
|
SmartVault Workflows |
Email is blocked and user can resend as encrypted by SmartVault | Any detected email will not be delivered to the recipient and the user can resend the email as SmartVault email. |
Email is allowed. Encrypted by SmartVault | Any detected email will be vaulted by SmartVault and the recipient receives a email notification. |
Email is blocked and user can request to resend as encrypted by SmartVault (admin must approve) | Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox. - The user receives an email with an alert of the quarantine action.
- The user can request to resend as SmartVault email.
- An administrator must approve the request.
|
DLP Alerts for Outgoing Emails
You can configure alerts for outgoing emails detected to contain a DLP violation:
- Send notification email to specific recipients when DLP is detected. It is possible to customize email
template using the gear icon next to the action.
- Send email alert to the sender when DLP Subject Regex pattern and DLP is detected in the email
subject.
- Send email alert to the sender when DLP Subject Regex pattern is not detected but DLP is detected in the email subject.