Forum Discussion
Solved
DLP Policy Matches
I am trying to created conditions in our test policy to only scan outgoing emails from our domain and ignore incoming emails from external parties.
In the conditions I am trying to make sure I select the correct one. I do see a condition "Sender domain is" would this condition only scan for emails coming from our domain (example.com) and ignore all other incoming emails?
The "Content is received from > people inside my organization" condition should be a better match.
The "Content is received from > people inside my organization" condition should be a better match.
Try this:
Example:
Content contains
SIT any of
- SSN
- Credit Card Numbers.
Evaluate predicate for (available for Exchange workload only)
- Message or attachment
AND
Content is shared from Microsoft 365
- With people outside my organization
You can then add actions if you wish.
I hope this helps.
