Palo Alto Networks Email DLP Commercial 1 license(s) Subscription English

Enterprise DLP prevents exfiltration of emails containing sensitive information with AI/ML powered data detections. For example, Enterprise DLP can prevent exfiltration of sensitive data over an outbound email sent from a salesperson within your organization to their personal email.

To prevent sensitive data exfiltration, Enterprise Data Loss Prevention (E-DLP) needs to perform inline inspection of all outbound emails. To do this, Enterprise DLP uses an inbound and outbound connector to transport outbound emails to and from Enterprise DLP for inspection and verdict rendering. You must also create email transport rules to specify the actions Microsoft Exchange or Gmail take based on the verdicts rendered by Enterprise DLP.

Enterprise DLP adds an email header to the email after inspection to indicate that Enterprise DLP has already inspected the email. If Enterprise DLP renders a Block or Quarantine verdict for inspected email, an email header to indicate the verdict is added as well. Emails that are already inspected are not transported to Enterprise DLP a second time and Microsoft Exchange or Gmail take action based on the existing email headers.

After Enterprise DLP inspects an email, it's returned back to Microsoft Exchange or Gmail for further action based on the rendered verdict.