Skip to main content

Hello, how can we help you today?

Or select a category below
Getting Started
Videos

Data Loss Prevention (DLP) policy overrides fail

  1. Exclaimer Knowledge Base
  2. Solutions
  3. Mail Flow
Payal Arya
  • Updated

Scenario

You have completed the Server-Side setup for Exclaimer - Signatures for Microsoft 365. You have configured a Data Loss Prevention policy that blocks certain email content but allows users to override the Data Loss Prevention policy.

When a user sends an email that conflicts with a Data Loss Prevention policy but chooses to manually override the policy, the email is still blocked by the Data Loss Prevention policy.

Reason

Due to the email being routed over a connector, the Data Loss Prevention override information is lost and the email is blocked once it returns from Exclaimer. This issue would also occur with any other email add-on service using this mail flow model.

Resolution

For any users that need to override Data Loss Prevention policies, it's possible to use Client-Side rules to apply signatures instead of Server-Side rules.

For more information, see how you can enable a Client-Side signature.

It is necessary to bypass the Exclaimer servers for these messages. This can be done in any one of the following ways:

  1. Automatically bypass specific users from the Exclaimer servers.

    To do this, add the sender address to the exceptions (the sender address matches) in the mail flow rule. For more information, see How to exclude a message from having a signature applied: steps on how to create an exception for a given domain.

  2. Manually bypass messages from routing to the Exclaimer servers.

    To do this, use a subject line or message body exception. For more information, see How to exclude a message from having a signature applied: steps on how to create an exception for specific keywords or phrases.