To enable DLP Rulesets

If you are using the Default Policy, or another existing policy, select that policy to open it, then continue with step 1 below.

If you are creating a new policy, select Manage > Policies > + Add Policy. Name your policy in a way that appropriately describes it and click Save. Once your policy is created, select that policy to open it, then continue with step 1 below.

1. Click the DLP tab from the top navigation menu
2. Click the + to create a new ruleset 

   

3. Name your ruleset and click Save
4. Click on your new ruleset under Not Linked, then click on the name of your ruleset to open it 

   

Content Scanning Rules

5. To add a content scanning rule, click +Add Rule under Content Scanning Rules
   1. Name your content scanning rule
   2. Select from the following actions in the dropdown box: Inform, Confirm, ConfirmText, Deny
      1. Confirm is the default selected action
   3. Choose the content type: All Support Files, All Except PDF, or Specific File Types
      1. If selecting Specific File Types, a box will appear allowing you to select all desired file types you want DLP to scan for 
   4. Write a regular expression (also known as regex)
      1. If you need assistance, you can do an Internet search for a regex generator or use an AI model to help create a regex
      2. For the purposes of this example, in the screenshot below, we used AI to generate a regex to look for social security numbers (Google, 2025)
   5. Test your regex by adding test strings to match and test strings to NOT match
      1. Green indicates the test passed; Red indicates the test failed
   6. When done, click OK at the bottom 

      

Hint: All Test Strings to Match or NOT Match need to be in the Passed state in order to save your Content Scanning Rule.

Client/Keyword Domain Rules

6. To add a client/keyword domain rule, click +Add Rule under Client/Keyword Domain Rules
   1. Add any keywords you want SafeSend to look for
   2. Add any domains or email addresses you want to associate with the above keyboards
   3. If you want SafeSend to automatically rewrite the listed domains with alternate text, add that under Alternate Text Domain
   4. Click OK 

      

Link Policies

7. To link a policy to your DLP ruleset, locate the desired policy in the Not Linked column and drag it over to the Linked policy
8. Click Save at the top

To manage an existing DLP ruleset

1. From within the SafeSend console, click on Manage > Rulesets
2. Select the desired existing ruleset from the list by clicking on the name
3. On the left side of your screen, you can edit existing content scanning rules or client/keyword domain rules by clicking on the pencil icon in the same line as your rule
4. On the right side of your screen, you can change the policy associated with your ruleset by dragging the policy between Linked and Not Linked

For complete details on SafeSend Web Add-in policies in version 6.0 or higher, navigate to: Web Add-in v6.0+ Policies.

1. Open the file settings.json by right-clicking on the file to open it with Notepad or any other desired text/code editor
2. Under the Data Loss Prevention (DLP) section header, you will see each associated setting (ClientKeywordDomainList, ContentScanningRules) as well as a description, options for that setting, and syntax
   • All settings will be in their default disabled state until enabled
3. To enable ClientKeywordDomainList:
   1. Uncomment by removing the // at the beginning of the line
   2. Use the syntax and examples provided in the settings.json file to configure the setting based on your needs
      
4. To enable ContentScanningRules:
   1. Uncomment by removing the // at the beginning of the line
   2. Use the syntax and examples provided in the settings.json file to configure the setting based on your needs
      
5. To enable DLPScanPasswordProtectedAttachments, allowing DLP to scan password-protected .zip files:
   1. Under the Advanced header, look for  // "DlpScanPasswordProtectedAttachments": true,
   2. Uncomment by removing the // at the beginning of the line and ensure it's set to true
6. Save and close the window when done