--- title: "Data Loss Prevention" slug: "data-loss-prevention-policy" updated: 2026-06-09T14:08:58Z published: 2026-06-09T14:08:58Z canonical: "support.perimeter81.com/data-loss-prevention-policy" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://support.perimeter81.com/llms.txt > Use this file to discover all available pages before exploring further. # Data Loss Prevention Data Loss Prevention (DLP) detects and prevents unauthorized sharing or retrieval of confidential information, such as social security numbers, credit card numbers, and bank account numbers. DLP enforces policies by associating data types with specific rules. It supports both file upload and file download, inspecting web-based transfers to prevent exposure of sensitive data. ## Use Case You are a financial organization aiming to prevent the upload or download of files containing confidential and sensitive data, such as bank account numbers, tax and revenue details, by unauthorized users. ## Actions in DLP Rules You can configure these actions within DLP rules: - **Detect**- Performs the DLP scan and detects the confidential information, but does not block the data. - **Prevent**- Performs the DLP scan and prevents data transfer if it finds a match to a data type. ## Known Limitations - DLP applies only to files being uploaded or downloaded over a browser. - Traffic to or from native applications (EXE-based clients) is not supported. - The system must inspect the traffic (and not bypass it in the HTTPS inspection policy) for DLP to take place. - DLP does not inspect Microsoft Purview sensitivity labels on files inside archive files (.zip, .rar, .7z, and similar). Sensitivity-label-based rules apply only when labeled files are uploaded or downloaded directly. ## Operations ### File upload - DLP inspection is supported for files up to 16 MB. - Supports Agent version 11.7 and higher. - File type supported - see [sk181662](https://support.checkpoint.com/results/sk/sk181662). ### File Download Note:The File Download feature is available only in Early Availability (EA) and appears in the UI only for EA tenants. - DLP inspection is supported for files up to 10 MB. - Supports Agent version 12.3 and higher. - When Transfer Type is selected as File Download, at least one Service must be selected. Encrypted files or files larger than the maximum size limit are not inspected, and a **Skip** log entry is recorded. - Websites: DLP supports download inspection for these web services: - Box - ChatGPT - Dropbox - GitHub - GitLab - Gmail - Google Drive - Google Gemini - Jira - Microsoft Copilot - Microsoft Teams - Monday.com - OneDrive - Outlook - Salesforce - Slack - File Types: | **Category** | **Extensions** | | --- | --- | | Microsoft Office | - Word: .doc, .dot, .docm, .docx, .dotx, .dotm - Excel: .xls, .xlt, .xlm, .xlsx, .xlsm, .xlsb, .xltx, .xltm, .xlam, .xlr, .csv, .xlc - PowerPoint: .ppt, .pps, .pot, .pptx, .pptm, .ppsx, .ppsm, .potx, .potm - OneNote: .one, .onepkg, .onetoc2 - Outlook: .msg, .oft, .pst, .ost - Publisher: .pub, .pubx - Access: .mdb, .accdb, .accft - Project: .mpp - Other: .rtf, .snp, .xsn, .thmx | | OpenOffice / LibreOffice | .odt, .ods, .odp, .odg, .sxw, .sxc, .sxi, .sxd, .sdw, .sdc, .sdp | | Adobe | .pdf, .ai, .indd, .inx, .psd, .psb, .ps | | Apple iWork | .pages, .pht, .key, .kth, .numbers, .nth, .num | | Archives | .arc, .rar, .zip, .7z, .lzh, .sit, .gz, .tar, .bz2, .xz, .arj, .cab, .z | | Text & CSV | .txt, .log, .csv | | Email | .eml, .nws, .mbox | | WordPerfect | .wpd, .wp, .wp5, .wp6, .wpf, .wps | | Lotus | .wk1, .wk3, .wks, .lwp, .mwp, .prz, .nsf, .lif, .pic | | Hangul Word Processor | .hwp, .hna, .hbo | | Databases | .dbf, .db, .wdb, .dat, .sdb | | CAD | .dwg, .dxf, .dxb, .dwf, .dgn, .dx | | Programming & Executables | .class, .dll, .exe, .com | | Other Document Processors | .sam, .wri, .wpt, .jtd, .jw, .mw2 | | Spreadsheets | .qpw, .et | | QuarkXPress | .qxp | | FrameMaker | .fm | | Visio | .vsd, .vdx | | Digital Signatures | .p7m, .p7s, .sef | | Other Files | .env, .chm, .hlp, .fd, .efx, .vcf, .ami, .rnd, .hqx, .c4, .rep, .cpi, .xys, .dwd, .es, .fc, .sh3, .dxl, .dca, .icf, .m11, .m4, .m5, .scf, .mpeg7, .obd, .wpm, .met, .p1, .awb, .awp, .pfs, .ppp, .tka, .psw, .q\&a, .wb3, .wb2, .qf, .rdf, .ras, .sda, .sig, .sxl, .svm, .sc5, .wrk, .uue, .vw, .vpd, .clp, .cur, .dib, .wmc, .en, .ws2, .ws, .wr1, .wbk, .yenc, .xxe | - These file types are not scanned to avoid impacting internet performance: | **Category** | **Extension** | | --- | --- | | Media | .mp3, .mp4, .mpg, .mpeg, .avi, .mov, .asf, .wmv, .wma, .rm, .wav, .mid, .swf, .flv | | Graphics | .gif, .jpg, .jpeg, .png, .bmp, .tif, .tiff, .pct, .pict, .pnt, .pcx, .img, .tga, .pbm, .pgm, .ppm, .xbm, .xpm, .xwd, .svg, .emf, .wmf, .cgm, .cmx, .eps, .hgl, .hpg, .cal, .g3, .dcm, .fpx, .pcd, .orf | | HTML/Web | .html, .htm, .xhtml, .css, .xml, .xmp, .js, .wml, .wmlb, .hdml, .chtml, .phtml | | Fonts | .ttf, .ttc | ## Creating a DLP Rule 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Policy**tab. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1766488831560.png) 4. Click **Add New Rule**. A new row appears in the table. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1766393399905.png) 5. Specify these: 1. In the **Name** column, enter a rule name. 2. In the **Members and Groups** column, select a user or a group to which you want to apply the rule. The default value is **Any**. 1. Hover over the **Members and Groups** column and click **Add Source** > **Groups or Members**. The **Manage Groups and Members**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758180653796.png) 2. To add a group, select **Groups**and in the search groups field, search and select a groups. 3. To add a member, select **Members**and in the search members field, search and select a members. 4. Click **Apply Changes**. 3. In the **Transfer Type**column, select preferred type: - **File Upload** - **File Download** ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1766515739922.png) 4. In the **Service**column, add a service to which you want to apply the rule. The default value is **Any**.Note:When you select **File Download**, you must add at least one Service. 5. Hover over the **Service**column, click **Add Service,**and select one of these: 1. Web Categories: 1. Select Web Categories. The **Manage Web Categories**pop up****appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758180714702.png) 2. Search and select one or more categories and click **Apply**. 2. Custom URLs: 1. Select **Custom URLs**. The **Manage Custom URLs** pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758180743148.png) 2. Search and select one or more URLs and click **Apply**. 3. To add a new custom URL, click **Add Custom URL**. The **Add Custom URL** popup appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758180769694.png) 4. Enter these: 1. **Name**- Name of the custom URL. 2. (Optional) **Description** 3. In the **URL field**, enter the list of URLs or upload a .CSV file with the list of URLs.Notes: - Do not add any protocols (http:// , https://) , query parameters (?) or anchors (#). If the URL includes a www prefix, include it as part of the domain. Wildcard (*) is supported and can only be used at the beginning of the domain, for example, *.example.com. - When uploading a CSV file with custom URLs, make sure the file does not include a header or subject line. Each row should contain only a single URL. 4. Click Add URL. The system creates the URL and displays it in the Custom URLs page. 3. **Applications:** 1. Select **Applications**. The **Add Applications** window appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758182498379.png)Note:The application list includes only applications themselves and does not include application-specific actions (for example, Facebook Post). 2. Search the application for which you want to apply the rule. 3. Hover over the application and click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758182531916.png). 4. Click **Apply Changes**. 6. In the **Data Types** column, add a data type to which you want to apply the rule. The default value is **Any**. 7. Hover over the **Data Types**column, click **Add Data Type**, and select **Add Data Types**. The**Edit Data Types**window appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1761041449560.png) 8. Search and select the data type or a group. You can specify up to 100 data types. 9. Click **Apply**. 10. In the **Action**column, select either of these: 1. **Prevent -**Block actions if sensitive data is detected and log the event. 2. **Detect -**Log the event but don't block. 11. Turn on the **Status**toggle button. Notes: - To create a rule above or below a particular rule, hover over the rule and scroll to the end of the row, click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758182033991.png) and select **Create Above**or **Create Below**. - To duplicate a rule above or below a particular rule, hover over the rule and scroll to the end of the row, click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758182033991.png) and select **Duplicate****Above**or **Duplicate****Below**. - To delete a rule, hover over the rule and scroll to the end of the row, click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758182033991.png), and select **Delete**. ### Rules Editing Under the Policy tab, you can: - Edit a Rule – Hover over the rule, and make changes. - Duplicate a Rule – Hover over the rule, click **Duplicate Above/Below**. - Delete a Rule – Hover over the rule, click **Delete**. ## Data Type Manager ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758521938205.png) | Legends | Description | | --- | --- | | 1 | Name of the data type. | | 2 | Date and time (in MM/DD/YY, HH:MM:SS XM format) when the data type was last modified. | | 3 | Brief description of the data type. | | 4 | Custom tags (category) for the data type. Helps in searching for data types. | | 5 | Matching criteria: - Pattern - Keyword - Dictionary - Weighted Words - Template - File attribute - Compound (Combination of data types with a logical separator) - Group (Data type group) | | 6 | The minimum number of times the matching criteria must be present in the file to trigger the DLP action specified in the policy capability rule. For example, if the matching criteria is **Keyword**, the value is **credit**and the **Matching****Threshold**is **5,** then the system takes the action specified by the policy capability rule if the file contains the term **credit**five times or more. | | 7 | Policy capability rules where the data type is used. | | 8 | Groups associated with the data type. | | 9 | [Add the data type to a group](/v1/docs/data-loss-prevention-1#adding-an-existing-data-type-to-a-group). | | 10 | [Duplicate the data type](/v1/docs/data-loss-prevention-1#managing-a-data-type-or-group). | | 11 | [Edit the data type](/v1/docs/data-loss-prevention-1#managing-a-data-type-or-group). | | 12 | Filter data type by category. | | 13 | Search for a data type. | ## Creating a Custom Data Type To create a custom data type: ### 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Data Type Manager** tab. 4. Click **New** and select **Data type**. The **Add data type** wizard appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758171787113.png) 5. Enter the data type name, object comment (optional) and description. 6. From the Data type recognition method list, select a recognition method: | Recognition Method | Description | Action | | --- | --- | --- | | Pattern | Applies the action specified in the policy capability rule if the file contents match the threshold for the pattern. For example: - Matches a sequence -**5523-2342** - Employee numbers that have an EMP prefix, followed by 5 digits - **EMP-\d{5}** Where, **EMP-** is the fixed prefix for all employee IDs, and **\d{5}**is exactly 5 digits (**\d** represents a digit, and **{5}**indicates that it must be exactly 5 digits long) - Match example: **EMP-12345** | In the Patterns section, enter the pattern and click![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758170819362.png). | | Keyword | Applies the action specified in the policy capability rule if the file contents match the threshold for the keyword. For example, Confidential, Secret. | In the Keywords section, enter the keywords and click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758170819362.png). | | Dictionary | Applies the action specified in the policy capability rule if the file contents match the threshold for the terms in the dictionary. For example, Spain, China, United Kingdom. Each keyword must be specified in a single line in the UTF-8 format. Note - The recommended file formats are .docx, .doc, and .txt. | Upload the dictionary file. | | Weighted Words | Applies the action specified in the policy capability rule if the file contains keywords and the cumulative weight matches or exceeds the threshold. Use this method to specify multiple keywords. For example, consider two keywords: - **credit**with **Weight**=1 and **Max**. **Weight**=3 - **transaction**with **Weight**=2 and **Max. Weight**=30 and **Matching Threshold**=15. If the file contains six occurrences of **credit**, each contributing a **Weight**of 1. That is, 1x6=6. As the **Max. Weight**=3, the final weight is 3. If the file contains eight occurrences of **transaction**, each contributing a **Weight**of 2. That is, 2x8=16. As the **Max. Weight**=30, the final weight is 16. As the sum of final weights of **credit**and **transaction**, that is, 16+3=19 is greater than the **Matching Threshold**, the system applies the specified action in the policy capability rule. If the sum of the final weights of the keywords is less than the **Matching Threshold**, then the file is uploaded or downloaded. | 1. Click **New**. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758171598023.png) 2. Enter these: - **Keyword** - **Weight** - Weight for each occurrence of the keyword. - **Max. Weight** - Maximum allowed weight for the keyword. 3. If the keyword is a regular expression, turn on the **Regex**toggle button. 4. Click **Add**. 5. Repeat steps *a* through *d* to add the next keyword. | | Template | Applies the action specified in the policy capability rule if the file contents match the threshold for the terms in the template. For example, a template with a set header, footer and logo. If the template contains images, the DLP is triggered only if the file contains the images in the same format as in the specified template. | Upload the template file. | | File attribute | Applies the action specified in the policy capability rule if the file: - Matches the specified file name. - Size is equal to or greater than the specified file size. - Type matches the specified file type. | Select any of these and enter a value: - **File name**: For example, Account Numbers, Employee Details. - **File size:** File size in Byte, KB, MB or GB. - **File type**: - Click![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758170819362.png)and select the file type(s) from the list. | 7. Click **Next**.Note - This step does not apply to **Template** and**File attribute** recognition methods. 8. Select the matching threshold. The minimum number of times the matching criteria must be present in the file to trigger the DLP. For example, if the matching criteria is Keyword, the value is credit and the Matching Threshold is 5, then the system takes the action specified by the policy capability rule if the file contain the term credit five times or more.Note - This step does not apply to **Template** and **File attribute** recognition methods. 9. Click **Finish**. The new custom data type is listed under **Custom Data Types**. 10. To permanently save all the changes to the database, click **Save** at the top. The **change detected**window appears. 11. Click **Confirm**. 12. To discard all the changes, click **Discard**at the top. The **change detected** window appears. 13. Click **Confirm**. ## Creating a Custom Data Type Group To create a custom data type group: Note - Nested groups are not supported. 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Data Type Manager** tab. 4. Click **New** and select **Group**. The **New Data type Group** pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758172495919.png) 5. Enter a group name, object comment (optional) and description. 6. To add predefined data types to the group, click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758170819362.png) in the **Predefined Data types** field and select the data type. 7. To add custom data types to the group, click ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758170819362.png) in the **Custom Data types** field and select the data type. 8. Click **Save**. The new data type group is listed under **My Groups**. 9. To permanently save all the changes to the database, click **Save**at the top. The **change detected**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758172564755.png) 10. Click **Confirm**. 11. To discard all the changes, click **Discard**at the top. The**change detected** pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1766503930485.png) 12. Click **Confirm**. ### Adding an Existing Data Type to a Group To add an existing data type to a group: 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Data Type Manager** tab. 4. In the **Data Type Name** list, expand **Custom Data Types**or **Predefined Data Types**and select the data type. 5. Click **Add to group**. 6. Select the group(s) from the list. 7. Click **Add**. 8. To permanently save all the changes to the database, click **Save**at the top. The **change detected**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174234781.png) 9. Click **Confirm**. 10. To discard all the changes, click **Discard** at the top. The **change detected**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174266724.png) 11. Click **Confirm**. ### Managing a Data Type or Group 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Data Type Manager** tab. 4. In the **Data Type Name** list, expand the DLP group and select the data type or the group. 5. To edit a data type or group, click **Edit****.****![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLP_Datatype_Editicon.png)** 1. Make the required changes.![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLP_Datatype_Edit.png)Note - If you edit a data type, the changes are reflected in all the groups that contain this data type. 2. Click **OK**. 6. To duplicate a data type or group, click **Duplicate.****![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLP_Datatype_Duplicateicon.png)** 1. Make the required changes. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLP_Datatype_Duplicate.png) 2. Click **OK**. 7. To delete a data type or group, click **Dele****te.** The **Deleting a data type** pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174784895.png)Note - Before you delete a data type, make sure to remove the data type from the groups and policy capability rules. 1. Click **Delete Data Type**. 8. To permanently save all the changes to the database, click **Save**at the top. The **change detected**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174234781.png) 9. Click **Confirm**. 10. To discard all the changes, click **Discard** at the top. The **change detected**pop up appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174266724.png) 11. Click **Confirm**. ## Managing Microsoft Sensitivity Labels for DLP Check Point SASE allows you to integrate Sensitivity labels from Microsoft Purview Information Protection into your DLP system, providing an additional layer of data protection based on predefined sensitivity classifications. ### Step 1 - Copy the Microsoft Sensitivity label names and their UUIDs from Microsoft Purview **Finding the UUID of labels in the Old Microsoft Purview portal** 1. Log in to Microsoft Purview Portal: [https://purview.microsoft.com/](https://purview.microsoft.com/) 2. Go to **Solutions**> **Information protection** > **Labels**. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758174942258.png) 3. Click the label name for which you want to find the UUID. 4. Copy the UUID in the **Label ID**or **GUID**section. **Finding the UUID of labels in the New Microsoft Purview portal** 1. Install the Exchange Online Management Module. The Microsoft Purview Security & Compliance PowerShell uses the Exchange Online Management Module for connection. 1. Open PowerShell as an administrator. 2. Run:ActionScriptActionScript ```actionscript Install-Module -Name ExchangeOnlineManagement -Force ``` 3. If the system prompts to install NuGet or trust the repository, enter **Y** and click **Enter**. 2. Connect to the Microsoft Purview Security & Compliance Center. 1. To create a session, run:ActionScriptActionScript ```actionscript Connect-IPPSSession ``` 2. In the Microsoft login page that appears, authenticate with the Microsoft 365 administrator credentials.Note - The administrator must have **Compliance Administrator** or **Information Protection Administrator** roles. 3. If your Microsoft Purview portal has Multi-Factor Authentication (MFA), complete the MFA process. Once authenticated, the session connects to the Microsoft Purview Security & Compliance Center. Now, you can run Microsoft Purview Security & Compliance PowerShell commands, such as managing labels, policies, or settings. 3. To view the UUID of the labels, run:ActionScriptActionScript ```actionscript Get-Label | Select-Object DisplayName, Name, Guid ``` 4. Copy the UUID of the labels. 5. To disconnect the session, run:ActionScriptActionScript ```actionscript Disconnect-ExchangeOnline ``` ### Step 2 - Creating Microsoft Sensitivity Labels in Check Point SASE 1. Sign in to the [Check Point Infinity Portal](https://portal.checkpoint.com/) and access the Check Point SASE Administrator Portal. 2. Click **Data Loss Prevention**. 3. Click the **Data Type Manager** tab. 4. Click **Manage Labels**. The **Manage Sensitivity Labels Dashboard**window appears. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/DLP_ManageSen.png) 5. Click **New**. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1758175233043.png) 6. In the **Name** field, enter a name for the label. For example, *R&D Source Code*. 7. In the **UUID**field, enter the label UUID. For more information, see [Step 1 - Copy the Microsoft Sensitivity label names and their UUIDs from Microsoft Purview](/v1/docs/data-loss-prevention-1#step-1-copy-the-microsoft-sensitivity-label-names-and-their-uuids-from-microsoft-purview). 8. Click **Add**. 9. Click **OK**.Notes: The newly created label is now listed in **Sensitivity Labels** under **Data Type Name**section. It also shows the label details: - Date modified - Description - Tags - Shows tags assigned, if any, for further categorization. - Type - Where used - Shows the DLP rule name that uses this label to enforce protection. - Groups - Shows if the label is part of any group. You can use Tags and Groups to better organize and manage the sensitivity labels. 10. To edit a label, select the label you want to edit, click **Edit**, update the fields and then click **Apply**. ![](https://cdn.document360.io/44667c0c-50d7-412a-acbd-20d4a41c952e/Images/Documentation/image-1761041952366.png) 11. To delete a label, select the label you want to delete, click **Delete**and then click **Delete****Data****Type**. 12. Click **Save**. 13. Click **Confirm**. ### Step 3 - Assign Sensitivity Labels to DLP Rules After creating Sensitivity labels in Check Point SASE, you must assign them to the DLP rules to enforce data protection based on these sensitivity labels. To assign sensitivity labels to a DLP rule, see [Creating a DLP Rule](/v1/docs/data-loss-prevention-1#creating-a-dlp-rule). ### DLP Logs - Logs are sent for **Prevent**and **Detect**. - **File upload**and**File Download******event generates a log for each handled file, regardless of whether the event is prevented, or detected.