Cisco Cisco Email Security Appliance C370D ユーザーガイド
18-23
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 18 Data Loss Prevention
Message Actions
•
Sending a DLP violation notification message to the sender or other contacts, such as a manager or
DLP compliance officer. See
DLP compliance officer. See
Note
These actions are not mutually exclusive: you can combine some of them within different DLP policies
for various processing needs for different user groups. You can also configure different treatments based
on the different severity levels in the same policy. For example, you may want to quarantine messages
with critical DLP violations and send a notification to a compliance officer, but you may want to deliver
messages with low severity levels.
for various processing needs for different user groups. You can also configure different treatments based
on the different severity levels in the same policy. For example, you may want to quarantine messages
with critical DLP violations and send a notification to a compliance officer, but you may want to deliver
messages with low severity levels.
Related Topics
•
•
•
Defining Actions to Take for DLP Violations (Message Actions)
Before You Begin
•
Create at least one dedicated quarantine to hold messages (or copies of messages) that violate DLP
policies.
policies.
This can be a local quarantine on an Email Security appliance or a centralized quarantine on a
Security Management appliance.
Security Management appliance.
For information, see
•
If you want to encrypt messages before delivery, make sure you have set up an encryption profile.
See
See
•
To include disclaimer text when delivering messages with DLP violations or suspected violations,
specify disclaimer text in Mail Policies > Text Resources. For information, see
specify disclaimer text in Mail Policies > Text Resources. For information, see
•
To send a notification to the sender of a DLP violation or to another person such as a compliance
officer, first create the DLP notification template. See
officer, first create the DLP notification template. See
.
Procedure
Step 1
Select Mail Policies > DLP Policy Customizations.
Step 2
In the Message Actions section, click Add Message Action.
Step 3
Enter a name for the message action.
Step 4
Enter a description of the message action.
Step 5
Choose whether to drop, deliver, or quarantine messages containing DLP violations.
Note
If you select Deliver, you can choose to have a copy of the message sent to a policy quarantine.
The copy of the message is a perfect clone, including the Message ID.
The copy of the message is a perfect clone, including the Message ID.
Step 6
If you want to encrypt the message upon delivery or its release from quarantine, select the Enable
Encryption check box and select the following options:
Encryption check box and select the following options: