Microsoft Purview Data Loss Prevention

One of the biggest strengths of the solution is its deep integration with the Microsoft ecosystem, which allows data protection rules to be applied consistently across multiple collaboration channels.

The tool does have a nice UI interface when creating the policies or looking at the activity explorer to see what policies a user triggered. Within the policies themselves, you are able to include different auditing levels and reporting as well as blocking the actions from occurring. Finally, Purview DLP allows for highly customizable rules based on sensitive information types, user context, and activity context.

The user interface is very user friendly. It integrates seamlessly with other Microsoft tools like teams, exchange, SharePoint and others.

Policy deployment, particularly for endpoint DLP, can sometimes take longer than expected, which may delay enforcement of newly created or updated rules.

The Purview DLP policies do not offer a wide range of activity to monitor for. From past experience, the tool had created some misattribution issues depending on the policy that was configured and the actions the user performed. Finally, since the DLP policies are what drives the tool, I would of liked to see an easier layout when creating those policies and more documentation around sample policies.

It works very well. Sometimes we get more false positives because fine tuning is not completed properly. Other than this it is excellent DLP solution.