In what order are rules applied in a policy?

Products

• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Enforce
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Prevent for Web
• Data Loss Prevention Network Protect

Issue/Introduction

What is the order that rules are applied to a policy.

Resolution

Exceptions are always processed first to ensure no waste of resources scanning a excluded item. From there,

Top level rules (those that are used together with the OR operator) are always applied

Compound rules (those that are used together with the AND operator) are short circuited when any subrule fails to match.

Note: As a rule, least expensive rules are applied first