Skip to main content
McAfee MVISION Cloud

Email DLP Known Behaviors

The following are considered known behaviors. These behaviors are not considered bugs, meaning that MVISION Cloud does not plan changes functionality to resolve them.

  • File name rule for email DLP does not detect attachments. The FileName for Email DLP is used to scan the name of the downloadable email, which is based on the Subject line saved as an EML file. It does not match against attachment file names, which are treated as metadata. 
  • Tokenized users are not supported for Email DLP. Emails sent from users who are tokenized cannot be scanned.
  • Only the recipient's emails are quarantined.
  • Only the internal recipient's copies are quarantined.
  • Automatic Reply emails are not available in the mailbox of the user that configured the Automatic Replies. Automatic Reply is a Rule that is evaluated when the user receives an email. An email is generated by a server when the rule is evaluated to be true. The Automatic Reply email will not be available in the user's mailbox. Since the Automatic Reply email does not exist in the user's mailbox, the email cannot be downloaded from the Incidents page if the Automatic Reply email generated an incident. The download will fail when you click the Automatic Reply email from the Incidents page.

Known Behavior of NRT and ODS Email DLP

The following are considered known behaviors. These behaviors are not considered bugs, meaning that MVISION Cloud does not plan changes functionality to resolve them.

  • NRT Email DLP: In the NRT scan, the email and its attachments are displayed under policy incident as a single item. Here Item Name refers to the email subject.
  • ODS Email DLP: In the ODS scan, the email and its attachments are displayed under policy incidents as different items. Here for the email, Item Name refers to the email subject. For the email attachment, Item Name refers to the name of the attachment. 

  • Was this article helpful?