Policy Configuration: "Match On" selection ignored on the Endpoint

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Endpoint Discover

Issue/Introduction

 The Envelope/Body/Attachment exclusion checkboxes do not work on the agent prior to DLP version 16.0.  They only work only on the server.

Resolution

Prior to DLP version 16.0, this is as designed. 
On the endpoint the "Match On: Envelope, Subject, Body, Attachments" selections are ignored and the endpoint will match on all components.

The new DLP 16.0 Execution Engine Enforces Component Matching on the Endpoint

The following mappings between Server and Endpoint component are used by the new execution engine. 

For channels that allow full-component categorization; for example, the mail client and HTTP:
Server Component    Endpoint Component
 Envelope                   Envelope
 Subject                      Envelope
 Body                          Body
 Attachment                Attachment

For all other channels:
Server Component    Endpoint Component
 Envelope                   Envelope
 Subject                      Generic
 Body                          Generic
 Attachment                Generic