After configuring a policy in Enterprise Manager with transmission attributes, the policy is pushed to the Cisco Ironport but does not get triggered when sensitive emails are sent that should have been caught by the policy. This issue occurs when there are transmission attributes with multiple values separated by commas as the delimiter.
Cisco Ironport parses the list of values in transmission attributes considering semicolon as the separator/delimiter as opposed to the comma, which is used for DLP network devices.
Use semicolon as the separator/delimiter for the transmission attribute values and save the policy.
For example: the recipient list in the transmission attributes for Ironport policies should look like the example below.