Conditional Response Rule Execution from one DLP policy to another
search cancel

Conditional Response Rule Execution from one DLP policy to another

book

Article ID: 248071

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Discover

Issue/Introduction

Is it possible to have Data Loss Prevention(DLP) execute a policy response rule based on the response rules of another policy? For example, if I have an email message that triggers two different policies and both of those policies have Email Notification response rules attached to them, can I have only one of the policies send an Email Notification in order to avoid sending multiple Email Notifications for the same detected message?

Environment

All DLP Versions

Resolution

There is currently no way in DLP to base the execution of a response rule off of a response rule in another policy. There is no conditional logic that operates from policy to policy. However, between different response rule types, there is a pre-established execution priority order as per About response rule action execution priority.