IronPort - Configuration Guide - AsyncOS 7.6.1

Editing a Message Action
11-8
Step 1 Select Security Settings > DLP Message Actions.
Step 2 Click the name of the message action you want to edit.
Step 3 Modify the message action.
Step 4 Submit and commit your changes.
Deleting a Message Action
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 11 Data Loss Prevention
To delete a message action, click on the trash can icon next to the message action you want to delete. A
confirmation message notifies you if the message is used in one or more DLP policies. Deleting a
message action removes it from these DLP policies. Submit and commit your changes.
Duplicating a Message Action
If you want to create a message action that is similar to an existing one but with different settings, you
have the option to create a duplicate message action.
Step 1 On the DLP Message Actions page, click on the Duplicate icon next to the message action that you want
to duplicate.
Step 2 Enter a name for the new message action.
Step 3 Make your changes to the message action’s settings.
Step 4 Submit and commit your changes.
RSA Email DLP
RSA Email DLP allows you to create and manage DLP policies locally on an individual Email Security
appliance.
Understanding How RSA Email DLP Works
The RSA Email DLP feature uses a three-level policy structure to define your organization’s data loss
prevention rules for detecting sensitive data in outgoing messages:
Detection Rules. At the lowest level, DLP content scanning consists of detection rules used to scan
for particular patterns in a block of text. These detection rules include regular expressions, words
and phrases, dictionaries, and entities, which are similar to the smart identifiers in used previously
in AsyncOS.
OL-25136-01