Understanding Policy Settings

Use policy settings to control how guidance, training, and enforcement apply to users on matching websites.

Core switches - Status: Enable or disable the policy without deleting it. - Block matched websites: When enabled, matched websites are blocked entirely. If a training is linked to the policy, the first deck is shown as the block message; otherwise a default block page is displayed. Requires an Awareness subscription. - Alert on every hit: Generate an alert whenever the policy matches. Useful while tuning or for sensitive sites.

Matching - Hostlists: Select one or more hostlists to define where the policy applies. To apply a policy everywhere, link it to "All Websites" (wildcard "*"). - Subdomain matching: When enabled, matches subdomains as well as the base domain.

Platforms - Apply to Platforms: Select which platforms this policy applies to - Browser Extension, Outlook Add-in, and/or Microsoft Teams. A policy must have the "Microsoft Teams" platform enabled for its DLP patterns to be scanned against Teams messages.

Trainings - Link one or more trainings to the policy on the Trainings tab. Training content (decks, questions, quiz settings) is managed on the Training detail page under Awareness > Trainings. A training can be shared across multiple policies.

Governance (requires Governance module) - Input Recording: When enabled, user input on matching pages is captured and available on the GenAI Prompts dashboard. Configure this on the Governance tab. - File Transfer Recording: When enabled, file uploads and downloads on matching pages are logged and available on the Data Flows dashboard. Configure this on the Governance tab.