SOLVED

Policy Tips not showing

%3CLINGO-SUB%20id%3D%22lingo-sub-362730%22%20slang%3D%22en-US%22%3EPolicy%20Tips%20not%20showing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-362730%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe're%20experiencing%20issues%20with%20DLP%20Policies%20that%20was%20working%20for%20a%20couple%20of%20weeks%2C%20but%20now%20it%20has%20not%20been%20working%20as%20expected.%3C%2FP%3E%3CP%3EThe%20DLP%20Policies%20are%20suppose%20to%20affect%20only%20Outlook%20when%20employees%20are%20emailing%20to%20an%20external%20email%20address.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20way%20I've%20set%20it%20up%20is%20as%20follows%3A%3C%2FP%3E%3CP%3EActions%3A%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EBlock%20people%20from%20sharing%20and%20restrict%20access%20to%20shared%20content%3C%2FLI%3E%3CLI%3EOnly%20people%20outside%20your%20organization.%3C%2FLI%3E%3C%2FUL%3E%3CP%3EUser%20notifications%3A%3C%2FP%3E%3CUL%3E%3CLI%3EUse%20Notifications%20to%20inform%20your%20users....%20(Toggled%20On)%3C%2FLI%3E%3CLI%3EEmail%20notifications%3A%26nbsp%3B%20Notify%20the%20user%20who%20sent%2C%20shared%2C%20or%20last%20modified%20the%20content.%20(Selected)%3C%2FLI%3E%3CLI%3EPolicy%20tips%3A%20(Checked)%3C%2FLI%3E%3C%2FUL%3E%3CP%3EUser%20overrides%3A%3C%2FP%3E%3CUL%3E%3CLI%3ELet%20people%20who%20see%20the%20tip%20override%20the%20policy%20and%20share%20the%20content...%20(Toggled%20On)%3C%2FLI%3E%3CLI%3ERequire%20a%20business%20justification%20to%20override...%20(Checked)%3C%2FLI%3E%3CLI%3EOverride%20the%20rule%20automatically%20if%20they%20report%20it%20as%20a%20false%20positive%20(Checked)%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%204%20separate%20DLP%20Policies%2C%20each%20setup%20by%20region%20(Canada%2C%20US%2C%20Europe%2C%20and%20Other%20(which%20contains%20Credit%20Cards%20policies).%26nbsp%3B%20All%20the%20policies%20are%20from%20the%20list%20that%20Microsoft%20has%20provided.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20I'm%20having%20is%20that%20from%20Outlook%20client%2C%20no%20policy%20tips%20are%20being%20displayed%20to%20the%20users%20and%20then%20when%20they%20go%20to%20send%20it%2C%20their%20email%20will%20get%20blocked.%26nbsp%3B%20The%20policy%20that%20is%20most%20affected%20by%20this%20is%20the%20Europe%20DLP%20for%20some%20reason%2C%20but%20it%20has%20happened%20for%20Canada%20and%20US%20DLP%20too.%3C%2FP%3E%3CP%3EWhen%20the%20users%20send%20the%20same%20message%20from%20OWA%2C%20they%20still%20won't%20get%20a%20Policy%20tip%2C%20but%20the%20email%20will%20go%20through%20and%20not%20get%20blocked%20-%20however%2C%20there%20are%20some%20instances%20where%20from%20OWA%2C%20it%20will%20get%20blocked%20with%20no%20Policy%20Tip%20being%20displayed.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20issue%20we%20often%20are%20experiencing%20is%20the%20Other%20DLP%20(for%20Credit%20card%20numbers).%26nbsp%3B%20We%20have%20clients%20and%20employees%20that%20are%20in%20Europe%2C%20and%20if%20they%20include%20their%20local%20phone%20number%2C%20their%20email%20will%20get%20blocked%20because%20the%20policy%20thinks%20the%20local%20number%20is%20actually%20a%20credit%20card%20number.%26nbsp%3B%20I've%20noticed%20that%20it%20has%20happened%20for%20those%20with%20a%20%2B44%20number%20in%20front.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20this%20all%20use%20to%20work%20for%20about%202%20weeks%20at%20the%20beginning%20of%20this%20year%2C%20but%20it%20all%20of%20sudden%20stopped%20working%20and%20has%20been%20giving%20us%20inconsistent%20and%20unexpected%20experiences.%26nbsp%3B%20I%20have%20opened%20up%20a%20MS%20Support%20Ticket%20back%20in%20the%20beginning%20of%20February%2C%20but%20I'm%20getting%20nowhere%20with%20them%20and%20it's%20getting%20to%20the%20point%20where%20I%20have%20to%20disable%20all%20DLP%20policies%20until%20I%20can%20figure%20out%20what's%20causing%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHas%20anyone%20have%20encountered%20this%20issue%20before%3F%26nbsp%3B%20We%20are%20losing%20confidence%20with%20Microsoft's%20handling%20of%20DLP%20and%20may%20just%20go%20with%20some%20other%20third%20party%20solution%2C%20but%20I%20want%20to%20avoid%20that%20before%20exhausting%20all%20options.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-370013%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Tips%20not%20showing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-370013%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F15378%22%20target%3D%22_blank%22%3E%40Suolon%20Hu%3C%2FA%3E%20i've%20just%20started%20to%20look%20at%20DLP%20after%20a%20client%20wanted%20a%20popup%20of%20some%20sort%20to%20alert%20about%20sending%20attachments%20externally.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20in%20the%20UK%2C%20Business%20Premium%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20zero%20policy%20tips%20in%20Outlook%20365!%20i%20tried%20the%20pre-made%20templates%20and%20those%20seem%20to%20work%20in%20blocking%20(email%20bounce%20back)%20but%20again%20zero%20policy%20tips.%20the%20docs%20i've%20seen%20mention%20Office%202013%20%26amp%3B%202016.%20I%20also%20saw%20a%20doc%20that%20said%20certain%20DLP%20features%20where%20not%20yet%20suppport%2C%20attachment%20types%20being%20one%20of%20these%20but%20can't%20find%20that%20post%20again%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20going%20to%20log%20a%20ticket%20with%20my%20CSP%20and%20see%20if%20they%20can%20did%20up%20any%20answers.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-790194%22%20slang%3D%22en-US%22%3ERe%3A%20Policy%20Tips%20not%20showing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-790194%22%20slang%3D%22en-US%22%3EIt's%20not%20working%20for%20me%20in%20SCC.%20It's%20worked%20in%20AIP%20so%20I%20thought%20I%20will%20%22move%20on%22%20and%20migrate%20to%20SCC%2C%20how%20wrong%20I%20was.%20One%20test%20policy%20never%20worked%2C%20so%20I%20deleted%20it%2C%20now%20it's%20in%20%22deletion%20state%22%20for%20over%20two%20weeks%20-%20ok%2C%20not%20a%20problem%2C%20quick%20google%20search%20and%20there%20is%20a%20PS%20command%20but%20recently%20Microsoft%20removed%20-ForceDeletion%20switch%20(on%20purpose%3F)%20so%20I%20can't%20force%20delete%20the%20policy%20in%20Powershell%20and%20it%20clutters%20my%20dashboard%20which%20I%20hate%20btw.%20So%20I%20created%20two%20more%20test%20policies%20and%20the%20mail%20tips%20are%20not%20working%2C%20I%20tried%20everything%20without%20any%20success.%20The%20admin%20experience%20in%20O365%20%2F%20Azure%20is%20very%20poor%20for%20me.%20And%20the%20whole%20configuration%20is%20not%20a%20single%20pane%20of%20glass%20at%20all.%20Azure%20here%2C%20old%20exchange%20admin%20there%2C%20new%20admin%20centre%20everywhere%20and%20the%20newest%20admin%20preview%20in%20between.%20Total%20mess%2C%20I'm%20sorry%20to%20say%20that...%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

 

We're experiencing issues with DLP Policies that was working for a couple of weeks, but now it has not been working as expected.

The DLP Policies are suppose to affect only Outlook when employees are emailing to an external email address.

 

The way I've set it up is as follows:

Actions: 

  • Block people from sharing and restrict access to shared content
  • Only people outside your organization.

User notifications:

  • Use Notifications to inform your users.... (Toggled On)
  • Email notifications:  Notify the user who sent, shared, or last modified the content. (Selected)
  • Policy tips: (Checked)

User overrides:

  • Let people who see the tip override the policy and share the content... (Toggled On)
  • Require a business justification to override... (Checked)
  • Override the rule automatically if they report it as a false positive (Checked)

 

I have 4 separate DLP Policies, each setup by region (Canada, US, Europe, and Other (which contains Credit Cards policies).  All the policies are from the list that Microsoft has provided.

 

The issue I'm having is that from Outlook client, no policy tips are being displayed to the users and then when they go to send it, their email will get blocked.  The policy that is most affected by this is the Europe DLP for some reason, but it has happened for Canada and US DLP too.

When the users send the same message from OWA, they still won't get a Policy tip, but the email will go through and not get blocked - however, there are some instances where from OWA, it will get blocked with no Policy Tip being displayed.

 

Another issue we often are experiencing is the Other DLP (for Credit card numbers).  We have clients and employees that are in Europe, and if they include their local phone number, their email will get blocked because the policy thinks the local number is actually a credit card number.  I've noticed that it has happened for those with a +44 number in front.

 

Now, this all use to work for about 2 weeks at the beginning of this year, but it all of sudden stopped working and has been giving us inconsistent and unexpected experiences.  I have opened up a MS Support Ticket back in the beginning of February, but I'm getting nowhere with them and it's getting to the point where I have to disable all DLP policies until I can figure out what's causing this.

 

Has anyone have encountered this issue before?  We are losing confidence with Microsoft's handling of DLP and may just go with some other third party solution, but I want to avoid that before exhausting all options.

 

Please help!

 

2 Replies
Best Response confirmed by Deleted
Solution

Hi@Suolon Hu i've just started to look at DLP after a client wanted a popup of some sort to alert about sending attachments externally.

 

I'm in the UK, Business Premium license.

 

I've seen zero policy tips in Outlook 365! i tried the pre-made templates and those seem to work in blocking (email bounce back) but again zero policy tips. the docs i've seen mention Office 2013 & 2016. I also saw a doc that said certain DLP features where not yet suppport, attachment types being one of these but can't find that post again :(

 

I'm going to log a ticket with my CSP and see if they can did up any answers.

It's not working for me in SCC. It's worked in AIP so I thought I will "move on" and migrate to SCC, how wrong I was. One test policy never worked, so I deleted it, now it's in "deletion state" for over two weeks - ok, not a problem, quick google search and there is a PS command but recently Microsoft removed -ForceDeletion switch (on purpose?) so I can't force delete the policy in Powershell and it clutters my dashboard which I hate btw. So I created two more test policies and the mail tips are not working, I tried everything without any success. The admin experience in O365 / Azure is very poor for me. And the whole configuration is not a single pane of glass at all. Azure here, old exchange admin there, new admin centre everywhere and the newest admin preview in between. Total mess, I'm sorry to say that...