Cisco Cisco Email Security Appliance C160 Mode D'Emploi

To delete DLP policies, use Enterprise Manager. 

To disable or enable DLP policies, use the Email Security appliance. Go to Mail Policies > DLP 
Policy Manager. 

Any outgoing mail policies associated with the disabled DLP policy will skip the policy when 
evaluating messages for DLP violations.

If you try to delete an outgoing mail policy that is linked to a DLP policy, the Email Security appliance 
displays a message warning you that the mail policy is currently in use. If you delete the policy anyway, 
Enterprise Manager automatically unlinks the deleted outgoing mail policy from any DLP policy that 
used it. Other than not scanning for messages based on the configuration of the deleted mail policy, DLP 
scanning continues to work as before. The next DLP policy package sent to the Email Security appliance 
by Enterprise Manager will not include anything related to the deleted mail policy. 

If connectivity between the Email Security appliance and Enterprise Manger is lost, any data that the 
appliance and Enterprise Manager cannot send is queued for delivery until the connection is restored. 
For the Email Security appliance, that means any data on messages containing possible DLP violations 
is queued. For Enterprise Manager, that means any data packages with new DLP policy information are 
queued. If the Email Security appliance does not receive updated DLP policy data from Enterprise 
Manager, the appliance continues to use the DLP policies it had previously received from Enterprise 
Manager.

If you want to go back to using RSA Email DLP for data loss prevention after using RSA Enterprise 
Manager, see 

The Email Security appliance automatically reverts back to the RSA Email DLP policies it used before 
you configured it to use RSA Enterprise Manager mode. If the appliance did not use any local DLP 
policies when it was in RSA Email DLP mode, the appliance will continue to use the DLP policies from 
Enterprise Manager until you create a local DLP policy.

If you want to use local DLP policies similar to the ones on Enterprise Manager, you can recreate them 
using the DLP Policy Manager. The Email Security appliance does not automatically create new policies 
based on the ones used by Enterprise Manager and they cannot be imported from Enterprise Manager.

For information on creating DLP policies using the DLP Policy Manager, see 

. 

For instructions on removing the Email Security appliance as a partner device in Enterprise Manager, 
see the RSA Enterprise Manager documentation.