Data Loss Prevention

%3CLINGO-SUB%20id%3D%22lingo-sub-78877%22%20slang%3D%22en-US%22%3EData%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-78877%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20must%20be%20missing%20something%2C%20I%20can't%20get%20DLP%20to%20work%20in%20two%20completely%20seperate%20test%20tenants.%20I've%20set%20up%20a%20less%20restrictive%20rule%20to%20try%20and%20trigger%20DLP%3A%20One%20or%20more%20Credit%20Card%20numbers%20should%20trigger%20Notifications%2C%20restrict%20access%2C%20and%20send%20a%20report.%20The%20Policy%20is%20applied%20to%20both%20OneDrive%20and%20Exchange%20(globally).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20both%20instances%26nbsp%3BI%20can%20create%20Word%20documents%20and%20add%20as%20many%20credit%20card%20numbers%20as%20I%20wish%20and%20I%20recieve%20no%20policy%20tips%2C%20the%20file%20is%20not%20restricted%20and%20I'm%20able%20to%20share.%20The%20same%20goes%20for%20Email.%20The%20two%20charts%20also%20display%20no%20data%20that%20matches%20current%20policies%20(I've%20now%20been%20testing%20this%20over%20a%20number%20of%20days).%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-132026%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-132026%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20like%20this%20thread%20is%20a%20couple%20months%20old%2C%20has%20anyone%20got%20this%20resolved%3F%20I%20used%20to%20have%20policy%20tips%20when%20I%20opened%20DLP%20flagged%20content%20but%20now%20the%20policy%20tips%20do%20not%20appear.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-84557%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-84557%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Jack%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20you%20get%20this%20to%20work%3F%3C%2FP%3E%3CP%3EHere's%20three%20documents%20I%20used%20in%20my%20tenant%20(both%20contain%20dummy%20creditcard%20numbers)%2C%20which%20did%20trigger%20the%20DLP%20rules%20I%20set.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAl%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-84437%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-84437%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20tested%20this%20in%20my%20tenant.%20A%20document%20containing%20IBAN's%20was%20detected%20in%20a%20couple%20of%20minutes.%20Including%20the%20policy%20tip.%20It%20took%20a%20little%20longer%20(10%20minutes%20I%20guess)%20to%20detect%20a%20Word%20document%20containing%20example%20creditcard%20numbers%20(see%20attached).%20I'm%20leaving%20for%20a%20BBQ%20now%20%3A)%3C%2Fimg%3E%20and%20SharePoint%20has%20not%20yet%20detected%20two%20different%20Excels%20including%20creditcard%20numbers.%20But%20probably%20this%20will%20be%20done%20when%20I%20get%20back.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80395%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80395%22%20slang%3D%22en-US%22%3E%3CP%3ETrial%20tenant%20is%20fine%2C%20but%20with%20the%20new%20Unified%20DLP%20policy%20model%20it%20takes%20a%20while%20for%20the%20deployment%20to%20the%20basic%20workloads%20to%20happen.%20You%20can%20check%26nbsp%3Bthe%20status%20via%20PowerShell.%26nbsp%3BIt%20also%20takes%20some%20time%20to%20index%20the%20content%20and%20for%20the%20DLP%20processing%20to%20happen%20on%20a%20new%2Fedited%20document.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80236%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80236%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20Vasil%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Egood%20to%20know%20it%20isn't%20just%20me.%20However%2C%20I%20can't%20even%20get%20policy%20tips%20to%20appear%20in%20SharePoint%20or%20OneDrive.%20Maybe%20this%20is%20because%20I'm%20using%20trial%20tenants%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-78990%22%20slang%3D%22en-US%22%3ERe%3A%20Data%20Loss%20Prevention%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-78990%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20having%20troubles%20getting%20policy%20tips%20to%20appear%20in%20Office%20apps%20too%2C%20and%20I've%20pretty%20much%20accepted%20that%20it's%20simply%20not%20working%20as%20expected%20atm.%20SPO%2FODFB%20however%20should%20be%20able%20to%20dipslay%20tips.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

 

I must be missing something, I can't get DLP to work in two completely seperate test tenants. I've set up a less restrictive rule to try and trigger DLP: One or more Credit Card numbers should trigger Notifications, restrict access, and send a report. The Policy is applied to both OneDrive and Exchange (globally). 

 

In both instances I can create Word documents and add as many credit card numbers as I wish and I recieve no policy tips, the file is not restricted and I'm able to share. The same goes for Email. The two charts also display no data that matches current policies (I've now been testing this over a number of days). 

6 Replies

I'm having troubles getting policy tips to appear in Office apps too, and I've pretty much accepted that it's simply not working as expected atm. SPO/ODFB however should be able to dipslay tips.

Thanks Vasil,

 

good to know it isn't just me. However, I can't even get policy tips to appear in SharePoint or OneDrive. Maybe this is because I'm using trial tenants?

Trial tenant is fine, but with the new Unified DLP policy model it takes a while for the deployment to the basic workloads to happen. You can check the status via PowerShell. It also takes some time to index the content and for the DLP processing to happen on a new/edited document.

Hi all,

 

I just tested this in my tenant. A document containing IBAN's was detected in a couple of minutes. Including the policy tip. It took a little longer (10 minutes I guess) to detect a Word document containing example creditcard numbers (see attached). I'm leaving for a BBQ now :) and SharePoint has not yet detected two different Excels including creditcard numbers. But probably this will be done when I get back.

Hi Jack,

 

Did you get this to work?

Here's three documents I used in my tenant (both contain dummy creditcard numbers), which did trigger the DLP rules I set.

 

Kind regards,

 

Al

Looks like this thread is a couple months old, has anyone got this resolved? I used to have policy tips when I opened DLP flagged content but now the policy tips do not appear.