• Cloud App Security
• Understanding Cloud App Security
• Configuring Cloud App Security
  • Subscribing to Cloud App Security
  • Activating Cloud Applications for Cloud App Security
  • Activating Dropbox for Cloud App Security
• Managing Quarantine for Box
  • Setting Up a Quarantine Folder for Dropbox
  • Using the Quarantine Page
  • Using the Quarantined File Creator Dashboard
  • Managing Quarantine for Dropbox
  • Managing Restore Requests
• Using the SonicWall Cloud App Security Dashboard
  • Using the Security Events Widgets
    • Changing a Security Event Widget to an Alert or Custom Query
    • Resetting a Security Event Widget
    • Hiding a Security Event Widget
    • Configuring Security Event Widget Custom Queries
    • Adjusting the Time Scale
  • Viewing the Summary of Security Events
  • Viewing Login Events
  • Viewing Secured Applications
  • Viewing the Scanned Files Summary
• Managing Security Events
  • Using the Security Event Graphs
    • Viewing Security Events by Severity
    • Viewing Security Events by State
    • Viewing Security Events by Cloud Application
  • Viewing and Acting on Security Events
    • Removing Filters
    • Acting on Security Events
  • Managing Multiple Events
• Managing Policies
  • Understanding Cloud App Security Policies
    • Monitor only
    • Detect and Prevent
  • Creating New Policy Rules
    • Creating Data Leak Protection Policy Rules
    • Creating Malware Policy Rules
    • Creating Threat Detection Policy Rules
    • Creating Custom Query Policies
  • Stopping Policy Rules
  • Removing Policy Rules
• Using Data Leak Protection
  • Configuring Data Leak Protection Detection Rules
  • Reactivating Data Leak Protection
  • Predefined Data Leak Protection Policy Rules
    • Global Rules
    • Credentials and Secrets
    • Predefined Data Leak Protection Rules for Specific Countries
      • Argentina
      • Australia
      • Belgium
      • Brazil
      • Canada
      • Chile
      • China
      • Columbia
      • Denmark
      • Finland
      • France
      • Germany
      • Hong Kong
      • India
      • Indonesia
      • Ireland
      • Israel
      • Italy
      • Japan
      • Korea
      • Mexico
      • The Netherlands
      • Norway
      • Paraguay
      • Peru
      • Poland
      • Portugal
      • Singapore
      • Spain
      • Sweden
      • Taiwan
      • Thailand
      • Turkey
      • United Kingdom
      • United States
      • Uruguay
      • Venezuela
• Using Cloud App Security Analytics
  • Viewing the Summary Report
  • Viewing the Weekly Reports
  • Viewing Dropbox Analytics
  • Viewing Shadow SaaS Analytics
  • Viewing and Creating Custom Queries
    • Creating Custom Queries
    • Adding Custom Queries to the Dashboard
• Configuring Cloud Applications in the Cloud App Store
  • Configuring Box for Cloud App Security
  • Re-Authorizing Cloud Applications
• Managing Security Applications in the Security App Store
  • Starting Security Applications
  • Stopping Security Applications
• Managing Security Tool Exceptions
• Using the System Log
  • Viewing the System Log
  • Exporting the System Log
• Managing Cloud App Security Licenses
  • Adding Administrator Users
  • Adding Read-Only Users
  • Unassigning Cloud App Security Licenses
• SonicWall Support
  • About This Document

Creating Data Leak Protection Policy Rules

Data Leak Protection (DLP) helps protect your organization's data from potential data breaches or data ex-filtration transmissions. Data Leak Protection can scan emails and text messages posted on cloud application email and storage platforms, and detect data patterns that should not be shared with unauthorized persons or targets. For more information, see Using Data Leak Protection.

To create a DLP policy rule

1. In the Rule Name field, enter the name you want to use to identify the rule.
2. From the Mode dropdown list, select the mode in which you want the DLP policy rule to operate:
   • Monitor only
   • Detect and Prevent (cloud application storage only)
3. In the Scope section, either:
   • Select All users and groups (all licensed users) to have the policy rule either apply to all users.
   • In the Specific users and groups list, select the specific users or user groups to which the policy should apply or be excluded from being applied.
4. In the DLP Criteria section:

   1. From the DLP Rules list, select the detection rules you want applied:

      • PII
      • PHI
      • Financial
      • Encrypted Content
      • Access Control
      • Intellectual Property
      • PCI
      • Resume
      • SOX
      • HIPAA

      For more information about the predefined DLP policy rules, refer to Predefined Data Leak Protection Policy Rules.

   2. From the Sensitivity list, select the sensitivity (based on the hit count) to be used to apply the rules.
   3. Select Skip internal items to have the rules not applied to items not shared with external users.

   Depending on the type of cloud application and the Mode, you may see a different set of options in the Advanced section.

5. In the Advanced > Actions section:

   1. Select Send files with sensitive data to vault to send the affected files to a secure vault location.

      A vault is a secure location accessible only to users with specific access privileges (such as a data privacy team). It is a different location that the quarantine area defined in your Cloud App Security cloud application configuration.

   2. Select Alert admin(s) to notify administrators when a possible leak is detected.
      • Click the gears icon to modify the email message sent to administrators.
      • Click the users icon to select which administrators should receive the message.
   3. Select Alert file owner to notify the user sharing the file when a possible leak is detected.
      • Click the gears icon to modify the email message sent to the file owner.
   4. Select Quarantine drive files to quarantine detected files to the quarantine folder defined in your Cloud App Security configuration.
6. In the Advanced > Alerts section:
   1. Select Send email alert to notify specific users when a possible leak is detected.
      • Click the gears icon to modify the email message sent to the file owner.
7. Click Save and Apply.