Forum Discussion
In bound Email triggers DLP Policy
I have a DLP policy to catch financial info from being emailed out by my users.
However we received an alert for an inbound email which had a routing number and account number for an invoice. T...
Don't think in terms of inbound/outbound. A mail is scanned once per tenant. If you send an internal mail, it's scanned on the initial outbound flow only; there is no inbound mail scanning. For external mail, a tenant is either scanning on the sending side, or it's scanning on the receiving side.
Have you look into the "Content is received from" condition? This would help control DLP scanning if you just want to scan "outbound" by setting the mail is coming from a "People inside my organization". This should prevent the external incoming mail from being scanned.
Have you look into the "Content is received from" condition? This would help control DLP scanning if you just want to scan "outbound" by setting the mail is coming from a "People inside my organization". This should prevent the external incoming mail from being scanned.