Forum Discussion

dilanmic's avatar
dilanmic
Iron Contributor
Dec 20, 2021

Applying DLP policies on PDF documents based on label applied

Hi All,

 

I have a requirement of applying classification and DLP on pdf file. We have label name "Internal" without protection enabled. I can do classification as an Internal on pdf files using AIP UL client (refer image01).

 

Image01

 

 

However, I have already set up a DLP policy to prevent sending documents to external parties that classified as a Internal and policy is working as expected on office files, but policy doesn't work when I attached the pdf document that classified as an internal.

 

Below are the DLP policy settings:

 

 

 

I would really appreciate the help on this.

 

Thanks,

Dilan

 

data loss prevention
information protection and governance
microsoft information governance
microsoft information protection

3 Replies

Sort By
  • Bradley1610's avatar
    Bradley1610
    Copper Contributor
    Mar 01, 2022
    Hi Dilan,
    Did you get to the bottom of this and if so what was the solution?
    thanks
    • dilanmic's avatar
      dilanmic
      Iron Contributor
      Mar 08, 2022
      I have created a case with Microsoft and they said it is a bug.
      • ChristianJBergstrom's avatar
        ChristianJBergstrom
        MVP
        Mar 08, 2022

        dilanmic Hello, Office Message Encryption is built on the Azure Rights Management service. For PDFs to be supported as an attachment type sending emails that needs to be configured using Set-IRMConfiguration -EnablePdfEncryption $true

         

        You can then use this feature when setting up DLP in the protection settings field (called Do not Forward and Encrypt).

         

        As these all work together, i.e. Azure RMS and Azure Information Protection I'm thinking this PDF setting might be something for you to verify.

Resources