DLP and Mail Transport Rules in EAC

Question

How long does it take for a dlp or mail rule to take effect once setup? I am seeing that it can take about 12 hours or so - is that normal? If there is such a big time difference how do companies go about testing the rules - cause it would take forever to test a change.

Thanks,

Chandrika

Answer 1

We are setting up the DLP policy is mail flow as it offers more options than the one in security and compliance.

When I create a test rule to send email to quarantine if the email is sent outside and the subject contains 9 digits. it does not seem to work. I have tried waiting for a while and validated the policynudges get downloaded locally.

Answer 2

Hi Chandrika,

Can you share any update with us?

Thanks,

Lance

Answer 3

Hi Chandrika,

First, I'd like to confirm whether you have followed the instructions in this article to configure the DLP policy. If not, please share the detailed steps with us for analysis.

If you are sure about that the configuration process is correct, please let us know if you are using Outlook to send emails. If yes, please refer to Changes to a data loss prevention policy don't take effect in Outlook 2013 in Office 365 and check whether the workarounds there can fix the issue.

Thanks,

Lance

Answer 4

Lance,

I have not seen a document, the delay is what I experienced. I setup a dlp mail flow to send an email to be approved yesterday if it had sensitive data. It did not appear to work yesterday. Today, I made more changes to the same mail flow and continued testing, but the rule I setup yesterday kicked off though I had changed it this morning. So it does seem like it takes a while to work.

We are in a hybrid environment but my mail box is in the cloud. It does appear to take a long time to test a change in this environment for each change made. Is there any way to expedite the process?

Thanks,

Answer 5

Hi Chandrika,

There is no official article that mentions the specific time it takes for a DLP policy or transport rule to take effect once once set up or change. Appreciate it if you can share the document you are seeing with us.

About testing the rules, you can refer to Test a mail flow rule. Note: Please wait 30 minutes after creating a rule before you test it. If you test immediately after you create the rule, you may get inconsistent behavior. If you’re using Exchange Server and have multiple Exchange servers, it may take even longer for all the servers to receive the rule.

Thanks,

Lance