Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Sending a DLP violation notification message to the sender or other contacts, such as a manager or 
DLP compliance officer. See 

These actions are not mutually exclusive: you can combine some of them within different DLP policies 
for various processing needs for different user groups. You can also configure different treatments based 
on the different severity levels in the same policy. For example, you may want to quarantine messages 
with critical DLP violations and send a notification to a compliance officer, but you may want to deliver 
messages with low severity levels.

Create at least one dedicated quarantine to hold messages (or copies of messages) that violate DLP 
policies. 

This can be a local quarantine on an Email Security appliance or a centralized quarantine on a 
Security Management appliance. 

For information, see 

 

If you want to encrypt messages before delivery, make sure you have set up an encryption profile. 
See 

To include disclaimer text when delivering messages with DLP violations or suspected violations, 
specify disclaimer text in Mail Policies > Text Resources. For information, see 

To send a notification to the sender of a DLP violation or to another person such as a compliance 
officer, first create the DLP notification template. See 

. 

Select Mail Policies > DLP Policy Customizations. 

In the Message Actions section, click Add Message Action. 

Enter a name for the message action.

Enter a description of the message action.

Choose whether to drop, deliver, or quarantine messages containing DLP violations.

If you select Deliver, you can choose to have a copy of the message sent to a policy quarantine. 
The copy of the message is a perfect clone, including the Message ID.

If you want to encrypt the message upon delivery or its release from quarantine, select the Enable 
Encryption check box and select the following options: