1,647 questions
DLP Policies applied to specific Labels are not working
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 82%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Leonardo Trombetta
0
Reputation points
My goal is to implement DLP policies that effectively detect the outbound transmission of specific documents carrying applied labels. Unfortunately, I have encountered difficulties in achieving the desired functionality, and I am reaching out for assistance to identify potential misconfigurations or oversights. Could you kindly provide insights or recommendations on potential areas of improvement or troubleshooting steps that could be undertaken to rectify this situation? Any guidance you could offer would be greatly appreciated.
SPEC:
Applied the DLP policy to a test group, called Secret
Microsoft Security | Microsoft Purview
{count} votes
-
Leonardo Trombetta 0 Reputation points
2024-01-31T16:00:28.3333333+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 36%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBM%3C/text%3E%3C/svg%3E)
Bhargava-MSFT 31,261 Reputation points Microsoft Employee Moderator2024-01-31T20:21:18.3166667+00:00 Hello Leonardo Trombetta ,
Welcome to the Microsoft Q&A forum. Can you please provide more details abuout the issue you are encountering with implementing DLP policies in Purview? Are the DLP policies not generating alerts when specific documents are transmitted outbound?
-
Leonardo Trombetta 0 Reputation points
2024-02-01T09:09:51.61+00:00 Hello @Bhargava-MSFT
Exactly. Doing tests for example, by applying a specific label that should trigger a DLP alert, the alert is not generated even though the document has been sent outside the organization. -
Bhargava-MSFT 31,261 Reputation points Microsoft Employee Moderator
2024-02-03T00:44:16.4333333+00:00 Hello Leonardo Trombetta ,
After further discussion with my internal team, they advised opening a support request as this requires further troubleshooting. I suggest opening a support request so that a support engineer can gather more information to address the issue. If you do not have a support plan, please inform me so that I can enable a one-time free support request. I look forward to hearing from you.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 1,080 Reputation points Microsoft Employee2024-04-11T12:48:37.0666667+00:00 @Anonymous Are you still experiencing this issue or were you able to resolve it?
If you are still experiencing the issue here are a couple of things you can check:
The policy priority - If you have other DLP policies, they could conflict with your current policy. Try setting the priority to the highest priority (0) then run the rule. It might as well be a propagation delay since changes to DLP policies can take up to 24 hours to propagate. If you had just created or modified the policy, this would have affected the changes from having been fully propagated. I would also recommend ensuring that the test data is correct as per the policy indication.
Sign in to comment
Sign in to answer