Labeled email and DLP
An administrator creates the DLP policy EXO-Label for Exchange with three rules based on sensitivity labels. An employee then sends labeled attachments to an external recipient and sees a policy tip, a justification dialog and a block.
W
DATA LOSS PREVENTION · EXCHANGE
Labeled email and DLP
Ada Admin
Eli Employee
Microsoft Purview
Home
Data Loss Prevention
Policies
Activity explorer
Information Protection
Insider Risk Management
DSPM for AI
Policies
+ Create policy
TEMPLATE
NAME
DESCRIPTION
Custom policy
Label-based rules for email to external recipients
LOCATIONS
+ Create rule
NAME
CONDITIONS
+ Add condition
Content contains: sensitivity labels
Select a label
▼
AND
Content is shared from Microsoft 365
Select
▼
ACTIONS
+ Add an action
No actions. The email is delivered.
Restrict access or encrypt the content in Microsoft 365 locations
Block everyone
Block only people outside your organization
USER OVERRIDES
USER NOTIFICATIONS
Save
Create rule
EXO-Label · DLP rules
EXO-Label · Rules
RULE
ACTION
OVERRIDE
Policy mode
EXO-Label
Simulation running
Shows which emails would match each rule, without blocking anything or notifying users.
Policy is on. Changes can take up to an hour to apply.
New message · Outlook
Send
To
anna@partnerco.example
External
Subject
Price list
Price list.docx
Internal
Sent
Check before you send
Internal content is going outside the organization.
Check that the recipient should have it.
Send
Cancel
Before you send
Confidential content. You can send it outside the organization
only with a business justification.
Send
Cancel
This email can't be sent
Strictly Confidential content can't be sent outside
the organization.
OK
Inbox · Microsoft 365
Your email was not sent
Rule: Strictly Confidential to external
Original message attached
Sent when a client can't show the tip before send.
THE USER EXPERIENCE
What Eli sees in Outlook
Eli sends three emails with labeled attachments to a partner
outside the organization.
Good to know
NEXT
Sharing labeled files and DLP
1/7
DATA LOSS PREVENTION
Labeled email and DLP
An administrator creates one DLP policy for email with
three rules based on sensitivity labels. Then we see what
happens when an employee sends labeled attachments to
an external recipient: a policy tip, a justification or a block.
informasjonsbeskyttelse.no
Previous
Next
Play
Restart
Fullscreen
Sound: off