I'm new to Microsoft 365 and currently setting everything up. I've successfully configured Exchange Hybrid using the wizard and migrated a few mailboxes, plus I'm set for Central Mail Transport (CMT). However, I'm facing a strange issue that I'm not sure is normal or a misconfiguration in my EXOL settings.
I've created a DLP policy to block credit card information from being sent both internally and externally. I thought that meant I, as an EXOL user, would be blocked if I tried to send credit card numbers to either a coworker or an external email address.
What's odd is that when my Gmail account sends credit card details to my EXOL account, the DLP policy blocks it, and my Gmail receives an automatic response saying that the message violates a policy in my organization. Is this expected behavior? I've searched everywhere for clarification on this issue but haven't found anything. Any insights would be appreciated!
2 Answers
It's normal to receive that violation email. You can actually customize the auto-response to provide a clearer explanation as to why the email was blocked. However, if your goal is to block employee-to-employee and employee-to-external email containing credit card info, make sure your DLP policies are configured accurately.
Yes, what you're seeing is actually expected behavior. The DLP settings are designed to reject emails for policy violations before they reach any inboxes, which can help maintain compliance and security.
But my Gmail account is the one that gets the violation message, not the EXOL user. We aren't having issues with external users emailing us banking information and don't want that blocked. Is there any way to ensure only internal communications are blocked without affecting external ones?