Procedure

1. Go to the Data Loss Prevention Policies screen by navigating to Data Loss Prevention → DLP Policies.
2. Add or edit a policy or exception:
   • For new policies or exceptions:
     Click Add.
   • For preexisting policies or exceptions:
     1. Click the policy or exception name.
     2. Click the Accounts tab.
3. Select the senders or recipients for the policy scan.
   • While creating a new policy:
     1. Select the account type:
        • From any sender to any recipient
        • From specific sender(s) to any recipient
        • From any sender to specific recipient(s).
        • From specific sender(s) to specific recipient(s).
     2. Click the specific sender(s) or specific recipient(s) link (if applicable).
   • While editing a policy:
     1. Select the account type:
        • All
        • Specific sender(s)
        • Specific recipient(s)
        • Specific sender(s) and recipient(s)
        ScanMail only applies the policy to the accounts selected for the Accounts type. If you select accounts for a different account type, ScanMail does not apply the policy to the previous accounts selected.
     2. Click the Edit link in the tables to change the included accounts and excepted accounts for this policy.
4. Select one of the following:
   • Anyone: Apply this policy or exception to all users.
   • Specific accounts: Select from Active Directory groups or ScanMail special groups.
5. Search and select AD Users/Groups/Contacts/Special Groups and add them to the Selected Account(s) list.
6. Search and select AD Users/Groups/Contacts/Special Groups and add them to the Selected Account(s) list on the Exclude Accounts screen.