Forum Discussion
Dale Christian
Jan 24, 2017Brass Contributor
DLP rules not matching
We have O365 E5. I have enabled DLP with the standard PCI rules for Exchange, OneDrive and SharePoint, using Test with Policy tips, but we are not not seeing any entries in the policy matches report...
Brian Fischesser
Jan 19, 2018Former Employee
It's all about Match Accuracy and Instance Count. That's where your policy tuning happens. Microsoft doesn't do a great job describing how the percentages in Match Accuracy increase or decrease the alerting/blocking threshold, so you'll have to test it out and tune it yourself before it goes into prod.
That being said, take a look at my screen grab and look where I dropped the minimum match threshold to 10% on IP Addresses and SSNs. Try it yourself and you should see the alerting and blocking actions occur. From there, increase until you've met your desired threshold.
Cheers!