Which Response Rules can be used with Data-at-Rest versus Data-in-Motion with DLP Rest CDS?

Products

• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Package
• Data Loss Prevention Cloud Service for Email

Issue/Introduction

The DLP Cloud Detection Service has multiple options for Response Rules, some of which can only be utilized with specific applications or detection protocols.

Environment

DLP 25.x and 16.x

Cause

Information about the list of applications that CASB supports for the various Enforce response actions is included at the Help Center topic for this feature.

Resolution

The following distinctions should be made when authoring policies:

• Data-at-Rest (DAR) policies only apply to CloudSOC Securlets
• Data-in-Motion (DIM) policies only apply to CloudSOC Gatelets

 

For more information, see this Help Center topic for the version you are using: "Configuring response rule actions".