Previous Topic: Included, Excluded and Ignored Lists

Next Topic: Define a Policy List

Combination List Checking

Available only for URL and email address lists.

In effect, combination list checking enables you to appoint a censor. For example, combination list checking allows you to block emails sent between the Research and Sales departments unless a copy has also been sent to a particular manager (for example, your regulatory compliance officer).

How does this work? First, the detected URL or address is compared against the Included list. If a match is confirmed, the URL or address is then compared against the Excluded list. If it also appears in the Excluded list, the URL or address is exempted and the trigger does not activate.

To illustrate the required policy settings in the earlier example, the group policy for the Sales department could include a control trigger for outgoing emails with the following list settings:

Policy setting

Value / list items

Which address list?

Use Included list, but exempt if recipient in Excluded list

Included list

research.unipraxis.com

Excluded list

compliance.officer@unipraxis.com

In this situation, CA DLP would detect an email sent to, say, frankschaeffer@research.unipraxis.com and trigger a control event (for example, to block the email) unless the compliance.officer@unipraxis.com was also included in the To: or Cc: list.