Target
- Email DLP Administrator
Purpose
- This explains how to create/edit Email DLP rules.
Notes
- This article is based on the product specifications as of March 2025 and may change without notice.
- Administrator privileges for Email DLP are required to verify the actual screen and change settings.
Please refer to the following article for how to set up an Administrator.
Setting Email DLP Administrator Privileges - Please refer to the following article for how to access the Administration screen.
How to Access the Email DLP Management Console - You need to create the target Rule Group in advance.
Create a Rule Group
Procedure
Individual Rule Creation/Edit Procedure
1. Access [Filter Settings] - [Rule Groups] from the left menu of the Email DLP Administration screen.
2. Select the target Rule Group.
2. Select [+ Create new rule] or the [gear icon] of the rule you want to edit.
3. Enter each item and click [+ Add] or [Apply].
For details on each item, please check Items (Rule Settings Items).
Batch Rule Creation/Edit Procedure
It is possible to create filters in bulk using YAML or JSON files.
YAML File Example:
version: 1
rule_groups:
- name: External Rule
rules:
- priority: 100
name: If all files are password protected, hold for 5 minutes
action:
type: suspend
attribute:
auto_release: true
duration: 5m
predicate: and
predicates:
- target: attachment
predicate: all-password-protected-data
pattern: ""
count: 0
- priority: 110
name: Delete if ZIP is attached
action:
type: delete
attribute: {}
notifies:
- type: notify_sender
predicate: and
predicates:
- target: attachment
predicate: filename-match
pattern: \.zip$
count: 1
- priority: 120
name: 5 minutes hold + HENNGE Secure Download
action:
type: suspend
attribute:
auto_release: true
duration: 5m
secure_transfer: true
predicate: all
For creating data with YAML or JSON files and new creation/overwrite, please refer to the following pages.
Creating Email DLP Import Data (Settings File)
Difference Between "Overwrite" and "New Creation" in Import Method
Next Steps
Set the created or edited rules to the filter.
※ If the target rule is already set to the filter, no action is required.
Email DLP Filter Settings - Creating/Editing Filters
Items (Rule Settings Items)
| Name | Description | Remarks | |
| Group Name | Rule Group Name | The Rule Group Name is automatically entered. In this procedure, the Rule Group Name cannot be changed. To edit the Rule Group Name, please refer to the following article. Email DLP Filter Settings - Creating/Editing Rules |
|
| Rule Name | Optional Name |
This content is applied to the merge tag ((%RULE-NAME%)) available in notifications (filters). ※ The Rule Name must be set within 256 characters. |
|
| Description | Rule Description |
Enter an optional description. ※ The Rule Description must be set within 1024 characters. |
|
| Priority | Priority of the Rule to be Created |
Rules are filtered in order from the smallest priority number, and if any rule is matched, filtering by subsequent rules will not be executed. Priority can be specified in the range of 1 to 99999. |
|
| Action | Rule Action | Select one of the following actions.
|
|
| Additional Bcc recipients | Whether to add a pre-set address to Bcc | Can be set in combination with Send / Suspend / Request Approval. Up to 5 addresses can be set. When setting multiple addresses, enter each address on a new line. |
|
| Attachment | Attachment Processing |
Can be set in combination with Send / Suspend / Request Approval. Select one of the following.
|
|
| Test Mode | Verification Mode where Rules are not Processed | For Test Mode, please refer to the following article. How to Pre-Verify New Rules (Using Test Mode) |
|
| Notification | Notification to Sender/Approver that Action (Send / Suspend / Request Approval / Delete) has been Applied | For creating notifications, please refer to the following article. Create a Notification (Filter) |
|
| Rule Conditions | Conditions for Applying the Rule |
Set the conditions under which the actions (Send / Suspend / Request Approval / Delete) and attachment processing (ZIP Encryption / HENNGE Secure Download, etc.) set in the previous steps will be applied. Select one of the following.
|
|
| Add | Target | Conditions for Applying the Rule to the Target |
※ Displayed when "Match all of the following (AND)" or "Match any of the following (OR)" is selected in Rule Conditions and [+ Add] is clicked. Select one of the following.
|
| Predicate | Rule Conditions |
※ Displayed when "Match all of the following (AND)" or "Match any of the following (OR)" is selected in Rule Conditions and [+ Add] is clicked. Select one of the following.
For PDF files and ZIP files, the application or environment used to create the file may affect file format compatibility, and there may be cases where it is not determined as "Exists". |
|
| Pattern | Pattern of the specified condition |
* This is displayed when you select "Match all of the following (AND)" or "Match any of the following (OR)" in Rule Conditions and click [+ Add]. Enter the search string in the pattern. Reference: Set Rule Conditions with Regular Expressions If you select "exists in address group" in "Predicate", you can select an Address Group. Please enter the search string. |
|
| Count | Number of times it matches or does not match the "Pattern" |
* This is displayed when you select "Match all of the following (AND)" or "Match any of the following (OR)" in Rule Conditions and click [+ Add]. If it meets the specified number of times or more in "Predicate", the action will be executed. |
|
| Message Size | Size of the email message to which you want to apply the rule | This rule applies when the message is larger than the specified size. (It is determined by the size of the entire email, not just the attachments) * "Rule Conditions" and "Message Size" become composite conditions, and the action is executed when both are met. |
|