Fine Tuning for Protocol
When you select a specific source or destination for a DLP rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session., you can optimize the rule for the selected protocol.
By default, rules use all supported protocols, or the default protocols selected for the gateway (in the Check Point gateway window).
If you specify that a rule should use only mail sending protocols, such as SMTP, the source and destination can be users (including user groups and LDAP Account Units) or email addresses (including specific email or domains).
If you specify that a rule must use only HTTP or FTP or both, the rule ignores any source or destination that is not recognized by IP address.
If the rule uses all supported protocols, HTTP and FTP recognize only source and destinations that IP address can specify. SMTP recognizes and enforce the rule for sources and destinations based on users and emails.