Step 2: Configure DLP policies for MCP Gateway (AI Agent Gateway), and deploy

Scope a policy rule to AI agents or agent groups, add the MCP Gateway (AI Agent Gateway) destination and operations, set the action for each operation in an action plan, then deploy.

Configuration has two parts, and both are needed before the solution enforces anything:

• The rule source. The solution supports custom users, directory users and groups, business units, AI Agents, and AI Agent Groups as rule sources. See Selecting AI agents and AI agent groups as a rule source.

• The rule destination, which selects the MCP Gateway channel, the MCP Gateway connectors the rule covers, and the operations to analyze. See Configuring the MCP Gateway (AI Agent Gateway) destination and operations.

• An action plan that defines the action to take when the rule matches. Action plans are configured per operation, so requests and responses can be handled differently. See Configuring an action plan for MCP Gateway.

Deploy after saving. Until the deployment completes, the rule and the action plan have no effect on live agent traffic.