截屏视频帮助

DLP not blocking web Gmail account

创建时间: 13 11 月 2012 | 6 条评论
Atif 的图片

Hi Guys,

I have configured a policy on DLP to block a keywoard "xyz" with all protocols enabled (using AND condition in rule). When we send email through endpoint webmail like Yahoo, Gmail and hotmail, email gets through with keyword successfully via web Gmail while Yahoo and Hotmail are working fine and emails are getting blocked.

Is there any option to deal with Gmail web interface because I think it does not use POST field to submit email through web?

Regards,

讨论 归类至以下社区:

评论 条评论跳转至最新评论

pete_4u2002 的图片

What's the browser you using?

I did check policy for the content keyword and it worked for Gmail. Can you check by removingthe and policy rule and verify if it works.

Atif 的图片

Its not working even after removing the AND condition and second protocol rule.

Jsneed 的图片

Gmail traffic is HTTPS and without the proper web proxy setup for Network discover, or the proper web browser for Endpoint it will not get blocked.  I would verify that you can see https posts on any site.

pete_4u2002 的图片

is the HTTPS checked in teh agent configuration that's been applied to the detection server?

Atif 的图片

HTTPs is enabled on SWG and DLP (in detection rule at protocol level and agent configuration).

HTTPs website like Gmail are working just fine but its just that blocking rule for a keyword is not working on Gmail web interface and other HTTPs websites. SWG is configured with SSL policy which is configured to intercept all kind of traffic. This policy is on the top in SWG policy configuration.

Regards,

Atif