Email address list definitions are predefined email domains or specific email addresses that can be referenced in email protection rules.
To get granularity in email protection rules, you include some email addresses and exclude others. Make sure to create both types of definitions.
Tip
For combinations of operators that you use frequently, add multiple entries to one email address list definition.
You can import email address lists in CSV format.
You can also import items with a script containing REST API calls. The administrator running the script must be a valid ePO - On-prem user who has permissions in ePO - On-prem Permission Sets to perform the actions that are invoked by the APIs.
Tip
Email address list CSV files use multiple columns. Export an address list to understand how the columns are populated before creating a file for import.
Email value definitions support wildcards, and can define conditions. An example of a condition defined with a wildcard is *@trellix.com. Combining an address list condition with a user group in a rule increases granularity.
In ePO - On-prem, select Menu → Data Protection → DLP Policy Manager → Definitions.
In the left pane, select Email Address List, then Actions → New.
Enter a Name and optional Description.
Select an Operator from the drop-down list.
Operators defined using the Email Addresses option support wildcards in the Value field.
Enter a value, then click Add.
Click Save when you have finished adding email addresses.