Topic Last Modified: 2012-09-27
You can change whether you want a DLP policy or its rules to be fully active by changing the mode setting. The mode, or disposition, for an entire policy can be set separately from the mode of each rule with a policy. When the mode for a policy and its related rules are not identical, the mode of a rule has the highest priority. You audit the actions within a rule every time a message is inspected, regardless of the mode that you have selected. When actions are audited, they are evaluated and compared with the messages that are being inspected. The mode setting restricts the effects of your policy actions, but the term audit only implies that the rules are evaluated. For more information about the procedures to change modes, see Manage DLP Policies. The following modes are available:
- Enforce Rules within the policy are
evaluated for all messages and supported file types. Mail flow can
be disrupted if data is detected that meets the conditions of the
policy. All actions described within the policy are taken.
- Test DLP policy with Policy Tips Rules
within the policy are evaluated for all messages and supported file
types. Mail flow will not be disrupted if data is detected that
meets the conditions of the policy. That is, messages are not
blocked. If Policy Tips are configured, they are shown to
users.
- Test DLP policy without Policy
Tips Rules within the policy are evaluated for
all messages and supported file types. Mail flow will not be
disrupted if data is detected that meets the conditions of the
policy. That is, messages are not blocked. If Policy Tips are
configured, they are not shown to users.