General

Procedure

1. Select General.
2. Enable the policy.
3. (Microsoft 365 services only) Optionally enable scanning for encrypted files and email messages.
   • For SharePoint Online, OneDrive, Microsoft Teams (Teams), or Microsoft Teams (Chat), turn on Enable RMS Protected File Scanning or Enable MIP-related Functions.
     This option only appears when you have added an RMS account or a MIP account.
   • For Exchange Online email messages, turn on Enable MIP-related Functions.
     This option only appears when you have granted Cloud App Security access to Exchange Online or Exchange Online (Inline Mode) with an Authorized Account, and have added a MIP account without skipping Step 5 in Adding an MIP Account.

     Note This feature only applies to messages sent by users in your organization.

4. (Exchange Online and Gmail only) Optionally select not to scan email messages in users' Junk Email folder for Exchange Online or users' Spam folder for Gmail during real-time and manual scanning.
5. Specify a policy name and description.
6. Specify the policy's priority value.

   Note Priority is assigned numerically, with "1" being the highest priority. The lower the priority value, the higher the priority. Its value ranges from 1 to 99999.

7. (Exchange Online Inline Mode only) Select Target Domains or Target Users / Groups.
8. In the Available Targets area, select one or multiple targets, and then click the arrow button to add them to the Selected Targets area.

   Exchange Online	Users and groups in your company's Active Directory infrastructure
   Exchange Online (Inline Mode)	Domains or users/groups in your company's Active Directory infrastructure
   SharePoint Online	SharePoint sites in your company
   OneDrive	Users and groups in your company that have OneDrive sites
   Microsoft Teams	Teams in your company
   Teams Chat	Users and groups in your company's Active Directory infrastructure
   Box, Dropbox	Users and groups in your company
   Google Drive	Users and organization units in your company
   Gmail	Users and groups in your company
   Gmail (Inline Mode)	Domains or users/groups in your company
   Salesforce	For ATP policies: Chatter, Community, Cases, and Attachments Profiles in your company For DLP policies: All packaged, standard, and custom objects Profiles in your company Cloud App Security monitors update to the specified object records by the users that belong to the specified profiles.

   Click Click here to resynchronize the list if the target to add is not found.

   Note You can select a policy configuration on the left navigation to continue with additional rules as necessary.