This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 91%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBF%3C/text%3E%3C/svg%3E)
I've setup a policy for simple detection of Socials and another for CC. I had tips on. I tested by starting an email out to an outside address and saw the tip not allowing me to send the email. But only if I put the SSN somewhere in the message. Does DLP not work unless the words social or SSN are in body???? Same for Creditcards. I have tried many settings like low confidence and such. Nothing will detect my socials or creditcards unless the words are near them. Is thwarting the filter this easy???
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 67%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Could you please share the complete DLP rule/policy you configured in your environment?
You could firstly take a reference at the links below to see if any help:
FIX: Exchange Transport rule (ETR) or Data Loss Prevention (DLP) rule is not working as expected
Office 365 DLP Not Working Issue – Fixed
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Microsoft support is working on it now. I took screen shots, but too many to paste here.
It's fixed as far as CC, but same issue still on soc's. I have tried a dozen socials and unless you put SSN next to them, no block or tips occur. We've tried making the rule low confidence to high, still not working.
Hi @Brian Farrar ,
Thanks for your feedback, you could share some pivotal screenshots or information here so that we could know your question better.
Basically the policy is for any mail going to an outside email address, that includes american SSN. Rule just for exchange, not one drive or sharepoint as we don't use them.