Outlook Discovery Task Wizard - Filtering

Use the Filtering page of the Outlook discovery task wizard to filter what information in Microsoft Outlook PST files is scanned by Forcepoint DLP.

PST files contain all the email users get as well as all their contacts, calendar meetings, tasks, and so on. PST files can contain data for more than one user, so they can contain several mailboxes with several different folders—for example: Inbox, Outbox, and Personal.

On this page, optionally configure Forcepoint DLP to filter by:

  • Mailbox or folder (for example, scan only user1\inbox, user2\outbox)
  • Email subjects (for example, include all email with the subject “Project Name” or exclude email messages with the subject “Personal”).
  • Time period in which the email messages were sent or received (for example, within the last 2 months)
  • Size of the email message (for example, larger than 300 KB).

This page configures which folders and mailboxes Forcepoint DLP scans within the PST file, while the Scanned Folder page specifies where to look for the PST file or files.

Steps

  1. Mark Filter by Mailbox or Folder name to have Forcepoint DLP scan by mailbox or folder name, then indicate what names to include and exclude. Wildcards are allowed.
    • List the mailboxes or folders to Include in the scan, separated by semicolons. To set Forcepoint DLP to scan all mailboxes or folders, set Include to *.
    • List the mailboxes or folders to Exclude from the scan, separated by semi- colons.
  2. Mark Filter by Subject to scan by subject lines (in, for example, email, calendar items, notes, contacts, and so on), then indicate what subjects to include and exclude.
  3. Mark Filter by Age to scan by item age, then:
    • Select Within to search only for items modified within a certain period, then indicate the period (in months) using the spinner.
    • Select More than to search only for items that were modified more than a certain number of months ago, then specify the number using the spinner.
    • Select From... To - to search for items modified between 2 dates, and specify the dates.
  4. Mark Filter by Size to scan by item size, then select one or both of the following:
    • Select Scan only files larger than to scan only item larger than a certain size, then use the spinner to specify the size.
    • Select Scan only files smaller than to scan only item smaller than a certain size, then use the spinner to specify the size.
    Note: Only the latest version of the item is scanned.
  5. Click Next, then continue with Emailing discovery task status reports.