Data Loss Prevention- simulation mode for DLP policies

  • Home |
  • Data Loss Prevention- simulation mode for DLP policies
Microsoft 365 Curtain Reveal Tech Bulletin Header

MC690596 · Microsoft 365 Suite, Microsoft 365 Experts

From Microsoft Corporation
Technical Bulletin MC690596 · Published Nov 17, 2023

Message Summary

Simulation mode in DLP provides DLP admins with an isolated experience to try a DLP policy, assess its impact, and build confidence in the policy efficacy to eventually reduce the time to policy enforcement. Simulation mode is an enhancement to the existing test mode behavior to help Admins evaluate new policies confidently.

This message is associated with Microsoft 365 Roadmap ID 173626

When this will happen:

Rollout will begin in mid-November and is expected to be complete by late November. 

How this will affect your organization:

  1. There will not be any change to end user policy enforcement from the policies that are currently in test mode.
  2. Once Simulation mode is enabled (from the DLP settings page), existing test mode policies will come up in the new simulation experience –
    • Summary of policy matches across locations will be available in a single console.
    • A flat list of all matching items with the ability to view file preview, matched conditions etc.
    • Alerts generated by simulation policies are not mixed with enforced policies in the main alerts queue.
  3. Any alerts generated from policies running in simulation will be limited to the DLP simulation experience and not included in the DLP alerts page to prevent disruption to production alerts investigation, allowing admins to assess and finetune the policy without any impact to the production policy.

What you need to do to prepare:

  1. During public preview, simulation mode experience can be enabled from the DLP settings page.
  2. Once generally available, all existing test mode policies will be available with simulation experience.

simulation overview
View image in new tab

items for review
View image in new tab

spurce
View image in new tab

Recent Comments

No comments to show.

Recent Posts

Microsoft 365 Curtain Reveal Tech Bulletin Header
New Outlook for Windows: Auto-reading emails with Microsoft Windows Narrator
October 14, 2024
Microsoft 365 Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Purview: Minor encrypted message portal design updates, URL to remain the same
October 14, 2024
Microsoft Exchange Curtain Reveal Tech Bulletin Header
(Updated) Microsoft Defender for Office 365: Tenant Allow/Block List will support IPv6 allow and block entries
October 14, 2024