View Enterprise DLP Log Details for Email DLP

1. Log in to Strata Cloud Manager.
2. Select ManageConfigurationSaaS SecurityData SecurityLogs.
3. Click View Logs for Email DLP Logs.
4. Filter your Email DLP logs as needed.

   • You can search for specific Email DLP logs based on the email Subject, Message ID, Sender email, or Recipient email.
   • Click Add Filter and filter your Email DLP logs based on:
     • Processing Time—Time it took the Email DLP to scan and forward email back to your Microsoft Exchange or Gmail relay host. The processing time is the Time Released minus the Time Captured.
     • Status—The Enterprise DLP inspection status indicating whether sensitive data was detected and whether the forwarded email was bounced.
       Common scenarios that cause Email DLP to return a bounce log are typically related to incorrect relay host settings when your connected Microsoft Exchange or Gmail, or networking issues affecting your email server relay host:
       • Recipient Issues
         • Recipient's email address is incorrect, their mailbox doesn't exist or isn't accepting new emails.
           Resolution—Verify the recipient's email address and ensure their account is active.
         • Recipient's inbox is full.
           Resolution—Reduce the email or email attachment size, or ask the recipient to free space in their inbox
         • Invalid recipient email address.
           Resolution—The recipient's email address might be in the wrong format or not allowed by the receiving email server's policies. Review the email address for typos or errors.
       • Authentication and Configuration Issues
         • Authentication issues such as incorrect login credentials or missing authentication.
           Resolution—Ensure you are using the correct username and password and that you properly configured authentication for your email server.
         • Domain Name Server (DNS) configuration and resolution issues.
           Resolution—Verify you configured your DNS records correctly and that the email server can resolve the recipient's domain.
       • Email Server Policy Issues
         • Anti-spam policies might have anti-spam policies blocking your email.
           Resolution—Ensure your domain and IP address are not blacklisted and that your email meets the requirements of anti-spam policies.
         • Poor sender reputation leading to automated email blocks.
           Resolution—Improve your sender reputation by sending legitimate emails and following best practices for email marketing.
         • IP address or domain blacklisting causing your emails to be blocked.
           Resolution—Check if your IP address or domain is listed on any blacklists and take steps to remove them if necessary.
     • Status Note—Detailed note populated by Enterprise DLP further describing the Enterprise DLP inspection Status.
     • Time Captured—Date and time Email DLP captured the forwarded email.
     • Time Released—Date and time Email DLP returned the forwarded email back to the sender's email server.