Data Loss Prevention Policies Parent topic

HTTP > Data Loss Prevention
The Data Loss Prevention (DLP) policy list at HTTP > Data Loss Prevention > Policies shows all DLP policies on the system—enabled as well as disabled. Click Add to create a new policy, or click a policy name to modify an existing one.
Modifying a DLP policy requires clicking on the policy name.
  • Enable DLP—Globally controls the enabled status of all policies; overrides the status of an individual policy. (Click Next after enabling or disabling a DLP policy.)
  • Add—Opens the Add Policy wizard that takes you through the steps to define a new policy.
  • Delete—Removes selected DLP policies from the account.
  • Policy Name—Click a policy name to edit the settings.
  • Priority—Sets the order of precedence — if two conflicting policies overlap in their scope, the policy with the higher priority (closer to 1) will be applied and the other ignored.
    IWSVA Data Loss Prevention Policy evaluates a given Web request first by finding out which group, if any, the requesting client is a member of, and then by evaluating which policy or policies are in effect for that group.
    If the client is affected by more than one policy, the policy with the highest priority is applied.
    Note
    Note
    The DLP Scan Global Policy is the default policy. It automatically applies to all users, but also always takes the lowest priority. Any policy with a higher priority in the list will take precedence.
  • Status—Indicates whether the policy is active or inactive.
  • Deploy Policies—Click this button after creating or modifying a Data Loss Prevention policy to have it take effect immediately.
See also: