Question
I want to apply a specific action when there is a Secure Transfer URL in the email body.
What settings should I configure?
Answer
You can achieve this by combining a condition that detects the Secure Transfer URL with the desired action in the Email DLP filter settings.
As a sending condition, specify the Secure Transfer URL in the email body using a regular expression.
[Example Condition]
Target: Body (including attachments)
Condition: Matches regular expression
Pattern:
https://download\.transfer\.hennge\.com* Please escape the dot (.) with a backslash (\) and write it as "\.".
■ Notes
The target for detection, "Body (including attachments)," also includes quoted reply text.
Therefore, if the relevant URL was quoted in past reply text, unless the URL is removed from the reply, the rule will apply and the specified action will be executed. Please be aware of this.
For instructions on creating rules and details on regular expressions, please refer to the following articles:
[Email DLP] Creating Rules
[Email DLP] Setting Rule Conditions with Regular Expressions