Which takes precedence (aka which do we do first) in a policy - the rule or the exclusion?
Keyword rule: Looking for "batman"
Exclusion: Exclude all US traffic
A message comes in from the US containing the keyword.
Does DLP find the message and then dismiss it, or does DLP dismiss it prior to looking for the keyword?
The following order precedence takes place depending on the DLP version utilized:
The match count etc. should not be influenced by the order in which these are executed.