Video Screencast Help

DLP Response Rules

Created: 03 Jul 2012 | 1 comment

In DLP admin guide it was mentioned as below

You cannot change the system-defined execution priority for different types of response rule actions. But, you can modify the order of execution for response rule actions of the same type with conflicting instructions.


When we say different types of response rule action, what exactly it mean.

is it mean response rule action of same server type(Endpoint prevent\Network prevent ) or response rule action of Same execution type like( Automated\Manual)

Discussion Filed Under:

Comments 1 CommentJump to latest comment

AMyers6671's picture

I believe it means you cannot change the priority certain responses take. For example, a 'send to syslog' may take precedence over 'send email notification'. As in, it will be sent to syslog first if that response is anywhere within the response rule.


If this post has helped you, please vote up or mark as solution to help others looking for the same data.