This issue needs a solution.

DLP Response Rules

Created: 03 Jul 2012
Login to vote
0 0 Votes

In DLP admin guide it was mentioned as below

 

You cannot change the system-defined execution priority for different types of response rule actions. But, you can modify the order of execution for response rule actions of the same type with conflicting instructions.

Query:

When we say different types of response rule action, what exactly it mean.

is it mean response rule action of same server type(Endpoint prevent\Network prevent ) or response rule action of Same execution type like( Automated\Manual)

 

Filed Under

Comments

AMyers6671's picture
AMyers6671
Partner
Accredited
05
Jul
2012

I believe it means you cannot

I believe it means you cannot change the priority certain responses take. For example, a 'send to syslog' may take precedence over 'send email notification'. As in, it will be sent to syslog first if that response is anywhere within the response rule.

Aaron

If this post has helped you, please vote up or mark as solution to help others looking for the same data.