Cisco Cisco Email Security Appliance C390 User Guide
18-25
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 18 Data Loss Prevention
Message Actions
Step 3
Submit and commit any changes.
Drafting DLP Notifications
Use this procedure to create a template for the notification that will be sent when an email message
contains information that violates your organization’s data loss prevention policies. You can send this
notification to the sender of the message that violated DLP policy, or to another address, for example a
manager or DLP Compliance officer.
contains information that violates your organization’s data loss prevention policies. You can send this
notification to the sender of the message that violated DLP policy, or to another address, for example a
manager or DLP Compliance officer.
Before You Begin
•
Familiarize yourself with the
. You can
use these variables to customize the notification with specific details about each violation.
Procedure
Step 1
Select Mail Policies > Text Resources.
Step 2
Click Add Text Resource.
Step 3
For Type, select DLP Notification Template.
DLP variables are not available for the plain Notification template.
Step 4
Enter notification text and variables.
The notification should inform its recipients that an outgoing message may contain sensitive data that
violates your organization’s data loss prevention policies.
violates your organization’s data loss prevention policies.
What To Do Next
Specify this DLP notification template in a Message Action in a DLP policy in the DLP Policy Manager.
Related Topics
•
DLP Notification Template Variable Definitions
Use the following variables to include specific information about each DLP violation in the notification.
Variable Substituted
With
$DLPPolicy
Replaced by the name of the email DLP policy violated.
$DLPSeverity
Replaced by the severity of violation. Can be “Low,” “Medium,”
“High,” or “Critical.”
“High,” or “Critical.”
$DLPRiskFactor
Replaced by the risk factor of the message’s sensitive material
(score 0 - 100).
(score 0 - 100).
$To
Replaced by the message To: header (not the Envelope
Recipient).
Recipient).