Learn more about modes for DLP policies and rules
Applies to: Exchange Server 2013
You can change whether you want a DLP policy or its rules to be fully active by changing the mode setting. The mode, or disposition, for an entire policy can be set separately from the mode of each rule with a policy. When the mode for a policy and its related rules are not identical, the mode of a rule has the highest priority. You audit the actions within a rule every time a message is inspected, regardless of the mode that you have selected. When actions are audited, they are evaluated and compared with the messages that are being inspected. The mode setting restricts the effects of your policy actions, but the term audit only implies that the rules are evaluated. For more information about the procedures to change modes, see Manage DLP policies. The following modes are available:
-
Enforce Rules within the policy are evaluated for all messages and supported file types. Mail flow can be disrupted if data is detected that meets the conditions of the policy. All actions described within the policy are taken.
-
Test DLP policy with Policy Tips Rules within the policy are evaluated for all messages and supported file types. Mail flow will not be disrupted if data is detected that meets the conditions of the policy. That is, messages are not blocked. If Policy Tips are configured, they are shown to users.
-
Test DLP policy without Policy Tips Rules within the policy are evaluated for all messages and supported file types. Mail flow will not be disrupted if data is detected that meets the conditions of the policy. That is, messages are not blocked. If Policy Tips are configured, they are not shown to users.