ITPROceed session Information Protection and Control in Exchange Online/On Premises by Ilse Van Criekinge

7. LESS RESTRICTIVE MORE RESTRICTIVE
• Apply the right level of control based on the sensitivity of the data
• Maximize control and minimize unnecessary user disruptions
Alert
“Allow delivery
but add a
warning.”
Append
“Allow delivery
but add a
disclaimer.”
Protect
“Allow delivery
but prevent
forwarding.”
Redirect
“Block
delivery
and redirect.”
Review
“Block delivery
until
reviewed.”
Block
“Do not
deliver.”
Modify
“Allow delivery
but modify
message.”
Classify
“Allow delivery
but apply
classification.”

9. Transport rules
Data Loss Prevention
Rights Management
10

10. Conditions
Actions
Exceptions
Conditions
Actions
Exceptions
11
New options
• Rules can be configured to run for a specific time
period
• Rules can be run in Test Mode
New filters
• Total message size
• Attachment extension keyword matching
• Sender IP address
New actions
• Criteria-based routing
• Forced TLS routing
• Halt processing of remaining rules on a message (“Stop
processing rules”)

13. DLP helps to
identify
monitor
protect
sensitive data through
deep content analysis

14. 15

15. • Content to monitor
• User action
• Mail flow actions
contains
• Credit cards
• EU debit cards
Defines the policy objectives
to help meet regulatory requirements
for identified content
Contains data type definitions
to help identify sensitive content
16

16. Predefined rules targeted at
sensitive data types
Advanced content detection
Combination of regular expressions,
dictionaries, and internal functions
(e.g., validate checksum on credit
card numbers)
Extensibility for customer and ISV-
defined data types

17. Conditions
Actions
Exceptions

18. Empower users to manage their
compliance
Contextual policy education
Doesn’t disrupt user workflow
Can work even when disconnected
Admin-customizable text and actions
19

19. 20

20. Comprehensive view of DLP
policy performance
Downloadable Excel workbook
Drill into specific departures from
policy to gain business insights
21

23.  Use Windows Azure AD Right Management
 Out-of the box
 Integrate natively with Exchange online and SharePoint online
 Integrate Office 365 with existing on-premises AD RMS
infrastructure

30. BYOK and logging are
not compatible with
Exchange Online

38. Ilse Van Criekinge
Technology Advisor Business Productivity
@ivcrieki, ilvancri@microsoft.com