Forum Discussion
In bound Email triggers DLP Policy
I have a DLP policy to catch financial info from being emailed out by my users.
However we received an alert for an inbound email which had a routing number and account number for an invoice. T...
1. Do you have transport rules configured with DLP?
2. The SCC (Office 365) DLP rules are expanding their coverage of email operations, so it is possible that they might have caught this too.
Impossible to say what happened without looking at the rules. Can you share the logic?
The rules were created in the SCC - nothing has ever been done in Exchange.
The weird thing is that I have checked and there are other emails that were received to the accounts payable address which also contained information which should have triggered the same rule but did not. It appears to have been from 2 email senders that the issue occurred.
Is there a way to prevent DLP from inbound external email?