DLP Creation in Security and Compliance Sync to Exchange Compliance Management

%3CLINGO-SUB%20id%3D%22lingo-sub-149072%22%20slang%3D%22en-US%22%3EDLP%20Creation%20in%20Security%20and%20Compliance%20Sync%20to%20Exchange%20Compliance%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149072%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20Evening%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20created%20a%20DLP%20Policy%20in%20the%20Security%20and%20Compliance%20section%20of%20Office%20365.%26nbsp%3B%20When%20created%20here%2C%20should%20it%20Sync%20to%20Exchange%2C%20and%20when%20I%20go%20into%20the%20Exchange%20Compliance%20Manager%2C%20the%20policy%20should%20be%20automatically%20created%3F%26nbsp%3B%20Or%20do%20I%20need%20to%20create%20a%20policy%20in%20both%20places%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-149072%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompliance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDLP%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149974%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20Creation%20in%20Security%20and%20Compliance%20Sync%20to%20Exchange%20Compliance%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149974%22%20slang%3D%22en-US%22%3E%3CP%3EGive%20it%20some%20time%2C%20it%20needs%20to%20replicate%20across%20all%20workloads%20(and%20the%20SLAs%20Microsoft%20mentions%20are%20far%20from%20what%20I've%20observed%20in%20real%20life).%20You%20can%20check%20the%20distribution%20status%20via%20PowerShell.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149606%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20Creation%20in%20Security%20and%20Compliance%20Sync%20to%20Exchange%20Compliance%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149606%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20replies.%3C%2FP%3E%0A%3CP%3EI%20have%20created%20the%20policy%20in%20the%20Security%20and%20Compliance%20section%2C%20but%20it%20does%20not%20seem%20to%20work.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20have%20used%20the%20HIPAA%20Template.%3C%2FP%3E%0A%3CP%3ESelected%20test%20showing%20Policy%20Tips.%3C%2FP%3E%0A%3CP%3EAll%20Three%20location%20-%20All%20Users%20with%20no%20Excluded%20users.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EConditions%3A%3C%2FP%3E%0A%3CDIV%20id%3D%22uiFlyoutInstance2%22%20class%3D%22flyout-cover%20flyout-container%20ng-scope%22%3E%0A%3CDIV%20class%3D%22flyout%20ms-u-slideLeftIn40%20policyshell%20ppage-container%22%3E%0A%3CDIV%20class%3D%22ppage-tabs%20buttons-docked%22%3E%0A%3CDIV%20class%3D%22ppage-tab-content%20ng-pristine%20ng-valid%20ng-submitted%22%3E%0A%3CDIV%20class%3D%22dlp-customize-rules%22%3E%0A%3CDIV%20class%3D%22listview%22%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%0A%3CDIV%20class%3D%22listview-item%22%3E%0A%3CDIV%20class%3D%22row%20listview-item-row%22%3E%0A%3CDIV%20class%3D%22col-md-9%20col-xs-9%20listview-item-cell-contents%22%3E%0A%3CDIV%20class%3D%22dlp-rule-name%22%3E%0A%3CDIV%20class%3D%22rule-details%22%3E%0A%3CDIV%20class%3D%22rule-conditions%20rule-property-container%22%3E%3C!--%20ngRepeat%3A%20condition%20in%20rule.Conditions%20--%3E%0A%3CDIV%20class%3D%22rule-condition%20rule-property-content%20ng-scope%22%3E%3C!--%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'SensitiveInformation'%20%26%26%20!!condition.Groups%20--%3E%20%3C!--%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'AccessScope'%20--%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%3CSPAN%20class%3D%22ng-binding%22%3EDetect%20content%20that's%20shared%3C%2FSPAN%3E%3CDIV%20class%3D%22paddingLeft20%20ng-binding%22%3Ewith%20people%20outside%20my%20organization%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C!--%20end%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'AccessScope'%20--%3E%20%3C!--%20ngIf%3A%20canShowMultiValueMatchConditionSummary(condition.Type)%20--%3E%3C%2FDIV%3E%0A%3C!--%20end%20ngRepeat%3A%20condition%20in%20rule.Conditions%20--%3E%0A%3CDIV%20class%3D%22rule-condition%20rule-property-content%20ng-scope%22%3E%3C!--%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'SensitiveInformation'%20%26%26%20!!condition.Groups%20--%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%3CSPAN%20class%3D%22ng-binding%22%3ESensitive%20information%20types%3C%2FSPAN%3E%20%3C!--%20ngRepeat%3A%20group%20in%20condition.Groups%20--%3E%3C!--%20ngIf%3A%20condition.Groups.length%20%3E%201%20--%3E%3CDIV%20class%3D%22paddingLeft20%20ng-binding%20ng-scope%22%3EPII%20Identifiers%3C%2FDIV%3E%0A%3C!--%20end%20ngIf%3A%20condition.Groups.length%20%3E%201%20--%3E%3C!--%20end%20ngRepeat%3A%20group%20in%20condition.Groups%20--%3E%3C!--%20ngIf%3A%20condition.Groups.length%20%3E%201%20--%3E%0A%3CDIV%20class%3D%22paddingLeft20%20ng-binding%20ng-scope%22%3EMedical%20Terms%3C%2FDIV%3E%0A%3C!--%20end%20ngIf%3A%20condition.Groups.length%20%3E%201%20--%3E%3C!--%20end%20ngRepeat%3A%20group%20in%20condition.Groups%20--%3E%20%3C!--%20ngRepeat%3A%20sensitiveType%20in%20condition.Groups%5B0%5D.SensitiveTypes%20--%3E%3C!--%20ngIf%3A%20condition.Groups.length%20%3D%3D%3D%201%20--%3E%3C!--%20end%20ngRepeat%3A%20sensitiveType%20in%20condition.Groups%5B0%5D.SensitiveTypes%20--%3E%3C!--%20ngIf%3A%20condition.Groups.length%20%3D%3D%3D%201%20--%3E%3C!--%20end%20ngRepeat%3A%20sensitiveType%20in%20condition.Groups%5B0%5D.SensitiveTypes%20--%3E%20%3C!--%20ngRepeat%3A%20label%20in%20condition.Groups%5B0%5D.Labels%20--%3E%3C%2FDIV%3E%0A%3C!--%20end%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'SensitiveInformation'%20%26%26%20!!condition.Groups%20--%3E%20%3C!--%20ngIf%3A%20condition.Type%20%3D%3D%3D%20'AccessScope'%20--%3E%20%3C!--%20ngIf%3A%20canShowMultiValueMatchConditionSummary(condition.Type)%20--%3E%3C%2FDIV%3E%0A%3C!--%20end%20ngRepeat%3A%20condition%20in%20rule.Conditions%20--%3E%3C%2FDIV%3E%0A%3CDIV%20class%3D%22rule-exceptifconditions%20rule-property-container%20ng-hide%22%3E%3CSPAN%20class%3D%22rule-exceptifconditions-heading%20fontBold%22%3E%20Exceptions%20%3C%2FSPAN%3E%20%3C!--%20ngRepeat%3A%20condition%20in%20rule.ExceptIfConditions%20--%3E%3C%2FDIV%3E%0A%3CDIV%20class%3D%22rule-actions%20rule-property-container%22%3E%3CSPAN%20class%3D%22rule-actions-heading%20fontBold%22%3E%20Actions%20%3C%2FSPAN%3E%3CDIV%20class%3D%22rule-action%20rule-property-content%22%3E%3C!--%20ngRepeat%3A%20action%20in%20rule.Actions%20--%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%3CSPAN%20class%3D%22ng-binding%22%3ERestrict%20access%20to%20the%20content%20for%20external%20users%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3C!--%20end%20ngRepeat%3A%20action%20in%20rule.Actions%20--%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%3CSPAN%20class%3D%22ng-binding%22%3ENotify%20users%20with%20email%20and%20policy%20tips%3C%2FSPAN%3E%3C%2FDIV%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CDIV%20class%3D%22ng-scope%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149601%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20Creation%20in%20Security%20and%20Compliance%20Sync%20to%20Exchange%20Compliance%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149601%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20create%20DLP%20policies%20in%20S%26amp%3BC%20Office%20365%20and%20make%20them%20apply%20to%20Exchange%20online.%20But%20these%20policies%20don't%20sync%20to%20Exchange%20online%20Admin%20Center.%20In%20any%20case%20Microsoft%20recommends%20the%20use%20of%20Security%20and%20Compliance%20Center%20for%20this%20purpose%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.office.com%2Fen-us%2F2017%2F01%2F09%2Funifying-data-loss-prevention-in-office-365%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.office.com%2Fen-us%2F2017%2F01%2F09%2Funifying-data-loss-prevention-in-office-365%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-149105%22%20slang%3D%22en-US%22%3ERe%3A%20DLP%20Creation%20in%20Security%20and%20Compliance%20Sync%20to%20Exchange%20Compliance%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-149105%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20does%20sync%20to%20Exchange%20(and%20any%20other%20workflows%20for%20that%20matter)%2C%20but%20you%20will%20not%20see%20it%20in%20the%20EAC%20if%20that's%20what%20you%20mean.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

Good Evening

 

I have created a DLP Policy in the Security and Compliance section of Office 365.  When created here, should it Sync to Exchange, and when I go into the Exchange Compliance Manager, the policy should be automatically created?  Or do I need to create a policy in both places?

 

Thank you!

4 Replies

It does sync to Exchange (and any other workflows for that matter), but you will not see it in the EAC if that's what you mean.

You can create DLP policies in S&C Office 365 and make them apply to Exchange online. But these policies don't sync to Exchange online Admin Center. In any case Microsoft recommends the use of Security and Compliance Center for this purpose:

 

https://blogs.office.com/en-us/2017/01/09/unifying-data-loss-prevention-in-office-365/

Thank you for your replies.

I have created the policy in the Security and Compliance section, but it does not seem to work.

 

I have used the HIPAA Template.

Selected test showing Policy Tips.

All Three location - All Users with no Excluded users.

 

Conditions:

Give it some time, it needs to replicate across all workloads (and the SLAs Microsoft mentions are far from what I've observed in real life). You can check the distribution status via PowerShell.