IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 11 Data Loss Prevention
Deleting an Email DLP Policy
OL-25136-01
To delete a DLP policy, click on the trash can icon next to the policy in the listing. A confirmation
message is displayed. This message notifies you if the DLP policy is used in one or more outgoing mail
policies. Deleting a DLP policy removes it from these mail policies. Submit and commit your changes.
Duplicating an Email DLP Policy
If you want to create a DLP policy that is similar to an existing one but with some different settings, the
DLP Policy Manager gives you the option to create a duplicate policy.
Step 1 On the DLP Policy Manager page, click on the Duplicate icon next to the policy in the listing that you
want to duplicate.
Step 2 Enter a name for the policy.
Step 3 Make your changes to the policy’s settings.
Step 4 Submit and commit your changes.
Using the DLP Assessment Wizard
AsyncOS provides a browser-based DLP Assessment Wizard to guide you through the three-step process
of configuring popular RSA Email DLP policies and enabling them in the appliance’s default outgoing
mail policy.
The DLP policies added using the DLP Assessment Wizard deliver all messages by default, regardless
of the severity of detected DLP violations. Use the DLP Policy Manager to edit the overall action on
messages, the severity level settings, and any other policy settings you want. For more information on
editing DLP policies, see DLP Policy Manager, page 11-11.
To launch the DLP Assessment Wizard when the appliance is using RSA Email DLP, go to the Security
Services > RSA Email DLP page. Click Edit Settings. Check the Enable and configure DLP using
the DLP Assessment Wizard check box and click Enable.
You can only use the DLP Assessment Wizard if there are no existing DLP policies on the appliance.
Figure 11-6 shows the option of running the DLP Assessment Wizard from the RSA Email Data Loss
Prevention Settings page.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
11-17