Configure Real-time Protection Policies for Email Outbound
Real-time Protection policies enable Netskope to scan outgoing emails for DLP violations. This protection is done as emails are received from Microsoft Exchange or Gmail and processed by the SMTP Proxy which allows data to be examined and protected in real time.
In the Netskope UI, navigate to Policies > Real-time Protection.
In the Real-time Protection page, click New Policy > Email Outbound.
In the Real-time Protection Policy page, select the Users, User Groups, and Organizational Units under Source. Outgoing emails from the selected users, groups, and organizations will be scanned by DLP.
Under Destination, select Email Outbound App and then select Microsoft Office 365 Exchange and Google Gmail as the Email Outbound.
In the Destinations section, click Edit under Activities & Constraints and select Send. Additionally, you can specify user constraints on the right side of the Select Activities & Constraints dialog box. Click Save.
Under Profile and Action, select the various DLP profiles from the list.
Select an action to define the enforcement action to be performed when a DLP profile matches the content in the email.
When you select the action as Alert, the action type is applied globally to all the selected DLP profiles and alerts are generated when any of the profiles match the email content.
When you select the action as Add SMTP Header, Netskope SMTP Proxy adds the specified custom header to the email when the email content matches the policy definition.
Alternatively, you can set the type of action for each profile by clicking Set action for each profile.
In the Profile and Action section, click Add Traffic Action to specify additional actions to be taken if none of the selected profiles match the criteria for violation.
Under Set Policy, provide a name for the policy and a policy description.
In the Set Policy section, click Email Notification. In the Email Notification window, specify the notification frequency and who should receive the notifications. Optionally, you can also specify the From Email. Click Done.
Click Save and in the Real-time Protection page click Apply Changes.