Cisco Cisco Email Security Appliance C160 Betriebsanweisung
11-31
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Chapter 11 Data Loss Prevention
Note
These options are advanced and should only be used in cases where predefined
settings do not meet your organization’s needs.
settings do not meet your organization’s needs.
Creating a DLP Policy Using the Custom Policy Template
You can create a custom DLP policy using the Custom Policy template. You can
use predefined RSA classifiers for the policy or add a custom classifier. See
use predefined RSA classifiers for the policy or add a custom classifier. See
for instructions on creating a
classifier.
Custom policies can return a DLP violation if the content matches a single
classifier or all classifiers, depending on how the policy is defined. To prevent
false positives, a DLP policy can include a classifier that the message content
must not match. By checking the NOT checkbox for a classifier, a message that
includes matching content for the classifier is not reported as a DLP violation.
classifier or all classifiers, depending on how the policy is defined. To prevent
false positives, a DLP policy can include a classifier that the message content
must not match. By checking the NOT checkbox for a classifier, a message that
includes matching content for the classifier is not reported as a DLP violation.
To add a custom policy:
Step 1
Select Mail Policies > DLP Policy Manager.
Step 2
Click Add DLP Policy.
Step 3
Click the name of the Custom Policy category.
Step 4
Click Add for the Custom Policy template.
Step 5
Enter a name and description for the policy.
Step 6
Select a classifier for the policy. You can use an existing classifier or select the
option Create a Classifier.
option Create a Classifier.
Step 7
Click Add.
If you selected Create a Classifier, the Add Content Matching Classifier
page opens. Otherwise, the predefined classifier is added to the policy.
page opens. Otherwise, the predefined classifier is added to the policy.
Step 8
To add more than one classifier to the policy, repeat steps
Step 9
Optionally, you can limit the DLP policy to messages with specific recipients or
senders. You can separate multiple entries using a line break or a comma. For
more information, see
senders. You can separate multiple entries using a line break or a comma. For
more information, see
.
Step 10
Optionally, you can limit the DLP policy to messages with specific attachment
types. For more information, see
types. For more information, see