Policies Overview

Administrator Help | TRITON AP-DATA | Version 8.3.x

Related topics:

What's in a policy?

Viewing policies

Creating Custom DLP Policies

Creating Discovery Policies

Once you have installed TRITON AP-DATA software and configured system settings, the next step is to create a policy.

Data Loss Prevention (DLP) policies enable you to monitor and control the flow of sensitive data throughout your organization. Depending on your TRITON AP-DATA configuration, you can set up policies to monitor information sent via email and over HTTP and HTTPS channels, and ensure all communications are in line with regulations and compliance laws as required. You can also monitor email being sent to users' mobile devices.

There are 5 kinds of DLP policies:

Email policy. You can enable a single email DLP policy that contains all attributes you wish to monitor in inbound and outbound messages. For each attribute (for example, the appearance of a defined key phrase), you define whether to permit or quarantine the message, and whether a notification should be sent. For more information, refer to Configuring the Email Data Loss Prevention Policy.

Web policy. You can enable a single Web DLP policy that contains all attributes you wish to monitor in HTTP, HTTP, and FTP channels, and also specify websites to which sensitive data cannot be sent. For more information, refer to Configuring the Web Data Loss Prevention Policy.

Mobile policy. You can enable a single mobile DLP policy that contains all attributes you wish to monitor in email being sent to users' mobile devices. For each attribute (for example, the appearance of a defined key phrase), you define whether to permit or quarantine the message, and whether a notification should be sent. For more information, refer to Configuring the Mobile Data Loss Prevention Policy.

Predefined policy. TRITON AP-DATA comes with a rich set of predefined policies that cover the data requirements for a wide variety of organizations. They include:

Acceptable use policies, such as cyberbullying, obscenities, and indecent images.

Content protection policies, such as Password Dissemination, Credit Cards, and Financial Information.

Data theft indicator policies, such as Suspected Malicious Dissemination and Disgruntled Employee.

Regulations, compliance, and standards policies, such as PCI and federal regulations.

For more information, refer to Using Predefined Policies.

Custom policy. Once you've had an opportunity to run your regulatory policies for a while and monitor the results, you might want to create custom policies. For more information, refer to Creating Custom DLP Policies.


	Note You cannot delete or rename an email, Web, or mobile DLP policy, but you can enable or disable their attributes. Likewise, you cannot update all rules or exceptions in email or Web policies using the batch operations on the Manage Policies screen.

Although much of the policy creation process is performed through wizards, it's important that you understand some key concepts before you get started.