Hi, I've read a few threads about the default DLP policy incorrectly quarantining emails based on attachments.
I have a few users that "require" the ability to send and receive macro enabled excel files .xlm
I put those handful of users in a group in a new DLP policy and raised it above the default policy, but the outbound emails still get caught with a "DLP Violation" email notification.
I've gone over the settings multiple times and can't see where it would incorrect.
Is there something I need to check, or is a support ticket my best course of action?
Hello Internet Technology,
Thank you for contacting the Sophos Community!
This sounds like something needs to be checked with Support. However, what is the action you selected for this type of message, and did you confirm the rule turned on?
Can you share a Screenshot of all DLP rules?