Skip to main content

Create a DLP policy

Create a DLP policy to group a set of rules and define the default action when no rule triggers a terminal action.

A policy consists of an ordered list of rules and a default action (pass or block). The policy is created as a draft. To activate it, publish it in a ruleset.

Permissions

info

This action requires the following DLP (Data Loss Prevention) role:

  • rule_editor

Console

In the DLP console, click Policies in the side menu.
  1. In the DLP console, click Policies in the sidebar.
  2. Click the Create policy button to open the policy editor.

General information

Fill in the policy information:

FieldExample valueDescription
Namemistral-prod-policyName of the policy
DescriptionProduction policy for MistralDescription of the policy
Platform typemistral-platformTarget platform type

Rule selection

  1. Select the rules to include in the policy from the list of available rules;
  2. Order the rules by drag and drop — the order determines the evaluation sequence;
  3. Rules are evaluated from top to bottom. A pass or block action terminates the evaluation immediately.

Default action

Select the policy default action:

  • pass: allows the request if no rule triggers a terminal action;
  • block: blocks the request if no rule triggers a terminal action.

Saving

Click Save to save the policy as a draft. The policy appears in the list with the "Draft" status.