"Modified Date" and "Modified By" are updated for Sender/Recipient Patterns after policy clone

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Enforce

Issue/Introduction

When you clone a policy that includes sender/recipient patterns, you may observe that the "Modified Date" and "Modified By" fields are updated under Manage > Policies > Sender/Recipient Patterns. 

The "Modified By" field reflects the administrator who performed the policy clone operation, while the "Modified Date" corresponds to the time the clone was performed, even though no manual changes were made to the patterns themselves.

 

Environment

DLP 16.X

Cause

The policy cloning process involves an export and import operation. During this process, all objects linked to the policy, including sender/recipient patterns, are re-imported into the system. This re-import effectively overwrites the existing definitions, which results in the "Modified Date" and "Modified By" fields being updated, even though the pattern definitions themselves remain unchanged.

Resolution

This behavior aligns with the current system design, and these updates do not impact the functionality or behavior of the sender/recipient patterns.