Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Discussions DLP Quarantine emails do not show up in the user email!

Sophos Email requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 5 replies
Subscribers 18 subscribers
Views 4593 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DLP Quarantine emails do not show up in the user email!

Chriz over 2 years ago

Hello,

we have the problem that emails detected as DLP violation were moved to quarantine according to Cloud Portal.

However, these are not showing up in the customer's quarantine emails for them to release.

How can we solve the problem?

Added tags
[edited by: Raphael Alganes at 9:22 AM (GMT -7) on 2 Jun 2023]

Top Replies

LuCar Toni over 2 years ago in reply to Chriz +3 verified

That is correct. You can inform somebody but still the Admin is the only part to release such content.

+1 LuCar Toni over 2 years ago

DLP Emails are only for the Admin Superadmin available.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Chriz over 2 years ago in reply to LuCar Toni

Thank you very much. With this DLP policy setting, does the user see the email back in quarantine?
Cancel
Vote Up 0 Vote Down

Cancel
0 Chriz over 2 years ago in reply to Chriz

Unfortunately, with the checkmark set, you will only receive a notification, but you will not be able to release and deliver the message.
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 2 years ago in reply to Chriz

That is correct. You can inform somebody but still the Admin is the only part to release such content.

__________________________________________________________________________________________________________________
Cancel
Vote Up +3 Vote Down

Cancel
0 josepalad over 2 years ago

This is an expected behavior. Just think of DLP as something that is supposed to restrict information from getting in or out of a company and not as an anti-spam solution hence the name "data leakage prevention". The administrator explicitly set these policies as per each respective company's rules. If these DLP quarantined emails can be released by the users then it nullifies what the administrators have set.
Cancel
Vote Up 0 Vote Down

Cancel