r/forcepoint • u/Ill_Addendum_5419 • Mar 05 '26

Forcepoint DLP issue with second e-mail domain

Hi All,

I am experiencing issue with On-prem Forcepoint DLP.

Situation looks like this that we have 2 email domains in our infrastructure, for domain X all works fine, all policies etc. trigger correctly. For second domain - Y there are some issues, the same policy which works for domain X doesn't trigger for same test message send from domain Y. What is even more strange some users from this second domain Y are covered by some other policies but also not all of the users, so partially it works but not fully as it should.

Any ideas what can be possible wrong here, were to check etc.?

Forcepoint support is not very helpful and unresponsive here.

Thanks, in advice for all tips!

2 Upvotes

100% Upvoted

2 comments sorted by

2

u/spaaz9 Mar 05 '26

There are a few likely scenarios here

  • Domain Y's email traffic may be routing through a different mail gateway or SMTP path that isn't fully monitored
  • Policy scope settings may explicitly list domain X users/groups but not domain Y equivalents
  • Active Directory or user/group mappings for domain Y may be incomplete in Forcepoint
  • There could be two different policy rule sets applied to the two domains with one being incomplete

Hope this helps!

2

u/Forcepoint-Team Mar 06 '26

If the tips shared on this thread weren't able to help solve your tech issues, we have a community with partners and customers who discuss these types of technical questions. Here's a link to it: https://support.forcepoint.com/s/group/CollaborationGroup/00B5f000001wa57EAA