Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Send messages to an alternate destination mailhost.

Send copies (bcc) of messages to other recipients. (For example, you could 
copy messages with critical DLP violations to a compliance officer’s mailbox 
for examination.)

Send a DLP violation notification message to the sender or other contacts, 
such as a manager or DLP compliance officer.

These actions are not mutually exclusive; you can combine some of them within 
different DLP policies for various processing needs for groups of users. You can 
also configure different treatments based on severity levels in the same policy. For 
example, you may want to quarantine messages with critical violations and send 
a notification to a compliance officer but deliver messages with low severity 
levels.

Email DLP policies contain the following information:

Name and description of the policy.

A list of content matching classifiers. Depending on the policy, you may be 
required to create a regular expression to search for identification numbers. 
See 

 for more information.

A list of specific senders and recipients for filtering messages. See 

 for more information.

A list of attachment file types for filtering messages. See 

 for more information.

Severity settings, including actions applied to settings and adjusting the 
Severity Scale. See 

 for more 

information.