DLP Workflows for Outgoing Emails

Note:

The workflows are available only in Prevent (Inline) mode.

Workflow

Description

Email is blocked. User is alerted and allowed to request a restore (admin must approve)

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email notification indicating that the message was quarantined.

  2. To view the original email, the user must request to restore the email.

  3. An administrator must approve the request.

Email is blocked. User is alerted and allowed to request a restore from their manager

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email notification indicating that the message was quarantined.

  2. To release the original email, the user must submit a restore request.

  3. The Manager receives an email with the request and can approve it through the end user portal.

Note:

If the user does not have an assigned manager, the restore request is sent to the Administrator.

Email is blocked. User is alerted and allowed to restore the email

Any detected email will not be delivered to the recipient and will be moved to quarantine mailbox.

  1. The user receives an email notification indicating that the message was quarantined.

  2. The user can restore the original email without any administrator approval.

Email is allowed. Header is added to the email

Any detected email will be delivered to the recipient with additional header that is configured in the policy.

Do nothing

Any detected email will be delivered to the recipient without any changes.

Microsoft Encryption Workflows

Email is blocked and user can resend as encrypted by Microsoft

Any detected email will not be delivered to the recipient and the user can resend the email as Microsoft encrypted email.

Email is allowed. Encrypted by Microsoft

Any detected email will be delivered to the recipient as encrypted by Microsoft. See Microsoft Encryption for Outgoing Emails.

Email is blocked and user can request to resend as encrypted by Microsoft (admin must approve)

Any detected email will not be delivered and will be moved to quarantine mailbox.

  1. The user receives an email notification.

  2. The user can request to resend as Microsoft encrypted email.

  3. An administrator must approve the request.

Avanan Email Encryption Workflows

Email is blocked and user can resend as encrypted by Email Encryption

The user can resend the email as Avanan Email Encryption email.

Email is allowed. Encrypted by Email Encryption

Any detected email will be vaulted and the recipient receives a notification. See Encrypting Outgoing Emails using Avanan Email Encryption.

Email is blocked and user can request to resend as encrypted by Email Encryption (admin must approve)

Any detected email will not be delivered and will be moved to quarantine mailbox.

  1. User is notified.

  2. User can request resend.

  3. An administrator must approve.

Email is blocked and user can request to resend as encrypted by Email Encryption (manager must approve)

Any detected email will not be delivered and will be moved to quarantine mailbox.

  1. User is notified.

  2. User submits request.

  3. Manager approves.

    Note:

    If no manager is assigned, request goes to Administrator.

  4. Email is encrypted and delivered securely. See Encrypting Outgoing Emails using Avanan Email Encryption.

To create Allow-List for DLP, see DLP Exceptions.