What's the best way to create a DLP Rule that looks for Email Addresses (using the Built In Netskope Email pattern) but not generate hits on our company domain ie @company.com.
I was trying to make a custom Entity and then use a not clause in the DLP Rule but not sure if that will give us the behavior I was looking for.
I suggest you try to use Constraints → Create External Domains → then use your company domain. Under user use Does not match.
This will look and should trigger to only domains which are not your company domains.
Thanks
I suggest you try to use Constraints → Create External Domains → then use your company domain. Under user use Does not match.
This will look and should trigger to only domains which are not your company domains.
Thanks
We use those constraints for other rules already but that’s not the behavior I need here. We are monitoring all the traffic sent by our users and specifically looking for email addresses as part of a PII rule. However we don’t want to trigger the DLP rule on our company email address with the DLP rule.
Hi You can still use same constraints in other polices.
Hi You can still use same constraints in other polices.
I’m not seeing anywhere within the DLP Rule logic you would add that type of constraint. Where are you suggesting it goes?
Managed to do this with a custom entity after all. Using email as the identifier and adding a does not end with our company domain fixed this for us
If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
