Microsoft Purview: Data Loss Prevention-Apply Purview network data security DLP policies to all websites, or all websites except specific cloud apps, through Entra GSA Internet Access integration

🚨 The Signal: Purview DLP can now apply network data security policies to all websites or all websites except specific cloud apps via Entra GSA Internet Access. This extends data loss prevention to uncatalogued cloud apps and websites.

The Impact

Security teams and network administrators are affected, gaining enhanced control over data exfiltration risks across all web traffic.

• Security teams: Reduced risk of data exfiltration from uncatalogued web applications.
• Network administrators: Simplified policy management for web traffic DLP.
• Compliance officers: Improved adherence to data protection regulations.
• End-users: Consistent data protection experience across all web browsing.

The Action

1. Review existing Purview DLP policies for network data security.
2. Integrate Purview DLP with Entra Global Secure Access Internet Access.
3. Configure new DLP policies to scope to 'all websites' or 'all websites except specific cloud apps'.
4. Test policies to ensure intended data protection without blocking legitimate traffic.
5. Monitor DLP alerts and incidents for policy effectiveness and tuning.

Domain: Purview · Impact: high · Workload: Microsoft Purview