Data Loss Prevention

 View Only

 DLP Notification

Jump to Best Answer
Ather Mobeen's profile image
Ather Mobeen posted Jan 19, 2023 01:48 AM
Hi,

I have created a policy to prevent emails on certain domains.

The policy is working fine but the issue is I have set notification to be prompted once the emails are blocked then users can receive that notification but I am getting the response as NDR message not the actual what I've set.

Thanks.
DLP Solutions's profile image
Trusted Advisor DLP Solutions Best Answer

DLP Freak is correct.. 

You need to have 2 different Actions in the Repsonse Rule.

1. Block the email - The bounce message to sender should be blank
2. Send an email to the Sender (SMTP) - in this email outline the issue with 'filled variables' and any other link or data. 

DLP Freak's profile image
DLP Freak
The response rule should be similar to:
Network Prevent: Block SMTP Message - The bounce message to sender should be blank
Redirect Message to this Address: should be filled 
All: Send Email Notification - should be set to Sender (SMTP Incidents Only)
Then customize the Notification Content to what you like.
Aman Yadav's profile image
Aman Yadav
Hello Mobeen,

Can you share the response rule snap that you set, accordingly we will suggest you and what exactly you need ,


Regards,
AmanY
Jainam technology's Pvt ltd
Ather Mobeen's profile image
Ather Mobeen
Hi All,

I need to create the response rule with 2 conditions.

1) In which user will be bounced with the message.

2) In which all notifications can be sent to one id .

I need to configure the response rule with matching above conditions.

Thanks.
Yasin Wasim's profile image
Yasin Wasim
Hi,

Please share the option that you have selected for the notification in your policy
Aman Yadav's profile image
Aman Yadav
Hello Mobeen,
Kindly find screenshot as per your requirement, 
Aman Yadav's profile image
Aman Yadav
Hi Mobeen,

You will select Block SMTP Message in response rule,