[Microsoft Exchange 2013] Data Loss Prevention

Data loss prevention (DLP) is an important issue for enterprise message systems because of the extensive use of email for business critical communication that includes sensitive data. In order to enforce compliance requirements for such data, and manage its use in email, without hindering the productivity of workers, Microsoft Exchange Server 2013 Preview includes DLP features that make managing sensitive data easier than ever before.

DLP policies are simple packages that contain sets of conditions, which are made up of rules, actions, and exceptions that message administrators create in the Exchange Administration Center (EAC) and then activate to filter email. You can create a DLP policy, but choose to not activate or enable it. This allows you to test your policies without affecting mail flow. DLP policies can use the full power of existing Exchange Transport Rules (ETRs). In fact, a number of new types of transport rules have been created in Exchange Server 2013 Preview in order to accomplish new DLP capability. One important new feature of ETRs is a new type of data classification that can be incorporated into mail flow processing. This new DLP classification engine performs deep content analysis through keyword matches, dictionary matches, regular expression evaluation, and other content examination to detect content that violates organizational DLP policies.

Here is an example of what you can do with DLP.

First I have to create a new DLP strategy.

When the strategy is created, I have to create rules in it.

As you can see with the model I choose in my strategy I have 4 rules created by default.

I remove these 4 rules to create my own rule.

Now I test this rule by sending a mail which contains the words "credit card number".

And here is the reject message the user receive.





DLP is a really great new feature of Exchange 2013 , simple and intuitive.

For more informations on DLP : http://technet.microsoft.com/en-us/library/jj150527(v=exchg.150)