Which Response Rules can be used with Data-at-Rest versus Data-in-Motion with DLP Rest CDS?

Products

• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Service for Email

Issue/Introduction

The DLP Cloud Detection Service has multiple options for Response Rules, some of which can only be utilized with specific applications or detection protocols.

Environment

DLP 15.x and 16.x

Cause

Information about the list of applications that CASB supports for the various Enforce response actions is included within each response action link in the Help Center topic below.

Resolution

The following distinctions should be made when authoring policies:

• Data-at-Rest (DAR) policies only apply to CloudSOC Securlets
• Data-in-Motion (DIM) policies only apply to CloudSOC Gatelets

 

See this Help Center page for more on this topic, "Configuring response rule actions (broadcom.com)".