cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
247
Views
0
Helpful
2
Replies

DLP Violation/message action

Jessi Patterson
Level 1
Level 1

Is it possible to configure an email to quarantine and drop if it triggers a DLP violation?

I am looking in the admin guide and only see the quarantine option for if you want to deliver the message.

Thanks!

2 Replies 2

In that case you'd just Quarantine, it wouldn't go any further, no need to Drop.
And then in the Quarantine, you'd set the ageing so it deletes old messages after a time, instead of releasing it.
(though manual releases would deliver it the mail)





________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.

saliyev
Cisco Employee
Cisco Employee

1) you can configure 'Message Actions' with one of three following options: deliver, quarantine, drop by navigating to Mail Policies -> DLP Policy Customizations

saliyev_2-1714345826407.png

 



2) then assign configured Actions to Severity Levels on your DLP Policies (Mail Policies -> DLP Policy Manager)

saliyev_3-1714345933743.png

 

 

Hope it helps.