Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
18-22
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 18 Data Loss Prevention
Message Actions
Step 2
Click the link in the DLP column in any row of the table.
Step 3
Select the DLP policies to associate with this outgoing mail policy.
Step 4
Submit your changes.
Step 5
Repeat as needed for other Outgoing Mail Policies.
Step 6
Commit your changes.
What To Do Next
See
Important Information About Editing or Deleting DLP Policies
Message Actions
You specify primary and secondary actions that the Email Security appliance will take when it detects a
possible DLP violation in an outgoing message. Different actions can be assigned for different violation
types and severities.
possible DLP violation in an outgoing message. Different actions can be assigned for different violation
types and severities.
Primary actions include:
•
Deliver
•
Drop
•
Quarantine
Secondary actions include:
•
Sending a copy to a policy quarantine if you choose to deliver the message. The copy is a perfect
clone of the original, including the Message ID. Quarantining a copy allows you to test the RSA
Email DLP system before deployment in addition to providing another way to monitor DLP
violations. When you release the copy from the quarantine, the appliance delivers the copy to the
recipient, who will have already received the original message.
clone of the original, including the Message ID. Quarantining a copy allows you to test the RSA
Email DLP system before deployment in addition to providing another way to monitor DLP
violations. When you release the copy from the quarantine, the appliance delivers the copy to the
recipient, who will have already received the original message.
•
Encrypting messages. The appliance only encrypts the message body. It does not encrypt the
message headers.
message headers.
•
Altering the subject header of messages containing a DLP violation.
•
Adding disclaimer text to messages.
•
Sending messages to an alternate destination mailhost.
•
Sending copies (bcc) of messages to other recipients. (For example, you could copy messages with
critical DLP violations to a compliance officer’s mailbox for examination.)
critical DLP violations to a compliance officer’s mailbox for examination.)
Action Information
Editing a DLP policy
If you rename a policy, you must re-enable it in your outgoing
mail policies.
mail policies.
Deleting a DLP policy
If you delete a policy, you will receive a notification if the
DLP policy is used in one or more outgoing mail policies.
Deleting a DLP policy removes it from these mail policies.
DLP policy is used in one or more outgoing mail policies.
Deleting a DLP policy removes it from these mail policies.