Procedure

1. Click the Channel tab.
2. Choose one of the following:
   • If you are on the External Clients tab, you can apply all Data Loss Prevention settings to internal clients by selecting Apply all settings to internal clients.
   • If you are on the Internal Clients tab, you can apply all Data Loss Prevention settings to external clients by selecting Apply all settings to external clients.
3. Select the channels for the policy. For details about channels, see Network Channels and System and Application Channels.
4. If you selected any of the network channels:
   1. Select the transmission scope.
      • All transmissions
      • Only transmissions outside the Local Area Network
   2. Click Exceptions.
   3. Specify monitored and non-monitored targets.
   See Transmission Scope and Targets for Network Channels for details on transmission scope, how targets work depending on the transmission scope, and how to define targets correctly.
5. If you selected Email clients:
   1. Click Exceptions.
   2. Specify monitored and non-monitored internal email domains. For details on monitored and non-monitored email domains, see Email Clients.
6. If you selected Removable storage:
   1. Click Exceptions.
   2. Add non-monitored removable storage devices, identifying them by their vendors. The device model and serial ID are optional.
      The approved list for USB devices supports the use of the asterisk (*) wildcard. Replace any field with the asterisk (*) to include all devices that satisfy the other fields. For example, [vendor]-[model]-* places all USB devices from the specified vendor and the specified model type, regardless of serial ID, to the approved list.
   3. To add more devices, click the plus (+) icon.

   Tip Use the Device List Tool to query devices connected to endpoints. The tool provides the device vendor, model, and serial ID for each device. For details, see Device List Tool.