Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 460
 
11-8
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 11      Data Loss Prevention
Editing a Message Action
Step 1
Select Security Settings > DLP Message Actions.
Step 2
Click the name of the message action you want to edit.
Step 3
Modify the message action.
Step 4
Submit and commit your changes.
Deleting a Message Action
To delete a message action, click on the trash can icon next to the message action you want to delete. A 
confirmation message notifies you if the message is used in one or more DLP policies. Deleting a 
message action removes it from these DLP policies. Submit and commit your changes.
Duplicating a Message Action
If you want to create a message action that is similar to an existing one but with different settings, you 
have the option to create a duplicate message action.
Step 1
On the DLP Message Actions page, click on the Duplicate icon next to the message action that you want 
to duplicate.
Step 2
Enter a name for the new message action.
Step 3
Make your changes to the message action’s settings.
Step 4
Submit and commit your changes.
RSA Email DLP
RSA Email DLP allows you to create and manage DLP policies locally on an individual Email Security 
appliance.
Understanding How RSA Email DLP Works
The RSA Email DLP feature uses a three-level policy structure to define your organization’s data loss 
prevention rules for detecting sensitive data in outgoing messages:
  •
Detection Rules. At the lowest level, DLP content scanning consists of detection rules used to scan 
for particular patterns in a block of text. These detection rules include regular expressions, words 
and phrases, dictionaries, and entities, which are similar to the smart identifiers in used previously 
in AsyncOS.