Data Protection Issues

How to Create a Microsoft Purview DLP Policy for File Transfer Uploads

Bushra Parveen Oct 23, 2026 869 views

Question details

The user needs to understand how to apply Microsoft Purview Data Loss Prevention (DLP) policies to files being uploaded to an internal managed file transfer service.

How to Create a DLP Policy for Managed File Transfer Uploads

Product: Microsoft Purview
Device & OS: not provided
Scenario: Configuring data loss prevention rules to secure sensitive file uploads to non-Microsoft or internal managed file transfer services.
Observed behavior: Determining if and how Microsoft Purview DLP can target internal transfer services to actively monitor and restrict unauthorized file uploads.

Before you start

Ensure you have global administrator or compliance administrator permissions in the Microsoft Purview portal and verify your subscription level supports Microsoft Defender for Cloud Apps.

Solution 1Recommended

Configure DLP for Non-Microsoft Cloud Apps

Set up your managed file transfer service as a non-Microsoft cloud app within Defender for Cloud Apps to allow Microsoft Purview DLP policies to target it.

Microsoft Purview allows you to extend Data Loss Prevention to non-Microsoft cloud apps. By integrating your internal managed file transfer service with Microsoft Defender for Cloud Apps, you can monitor and restrict sensitive data uploads across third-party platforms.

Verify service compatibility

Check whether your specific managed file transfer service can be configured and connected as a non-Microsoft cloud app in your Microsoft 365 environment.

Access the Microsoft Purview portal

Log in to the Microsoft Purview compliance portal using your administrator credentials and navigate to the 'Data loss prevention' section.

Create or edit a DLP policy

Select 'Policies' from the menu, then click 'Create policy' to build a new set of rules, or select an existing policy to edit.

Set the policy location

In the 'Locations' configuration step, toggle on 'Microsoft Defender for Cloud Apps' so the policy applies to your configured non-Microsoft transfer service.

Define rules and deploy

Set the specific conditions for sensitive data detection and define the protective actions (such as block, warn, or audit) for file uploads, then deploy the policy.

Configure DLP for Non-Microsoft Cloud Apps

Environment Support: Confirm that the required monitoring capabilities and app connectors for your chosen file transfer service are fully supported in your current environment.

Free Microsoft Office alternative

Secure Your Documents Locally with WPS Office

While enterprise DLP policies handle cloud data transfers, ensuring your local files are secure is just as important. WPS Office is a highly compatible, free alternative to Microsoft Office that offers robust local document encryption and protection features.

1. Download WPS Office: Visit the official WPS website and download the free office suite for your operating system.
2. Open your document: Launch WPS Office and open the sensitive file you need to edit or secure.
3. Apply document encryption: Go to the Menu, select 'Document Encryption', and set a strong password to protect your sensitive files locally before any network transfer.

Fully compatible with Microsoft Word, Excel, and PowerPoint formatsBuilt-in local document encryption to prevent unauthorized accessLightweight installation with offline editing capabilitiesFree alternative to expensive subscription-based office suites

microsoft office alternative - wps office

Frequently Asked Questions

Can Microsoft Purview DLP policies apply to any third-party file transfer service?

DLP policies can target third-party services only if they can be connected and configured as non-Microsoft cloud apps via Microsoft Defender for Cloud Apps.

What licenses are required for non-Microsoft cloud app DLP?

You generally need specific Microsoft 365 E5 or Microsoft 365 E5 Compliance licenses to utilize advanced DLP capabilities for non-Microsoft cloud apps.

How does the DLP policy block sensitive file uploads?

Once configured, the DLP policy scans the file content during the upload process. If the content matches the sensitive information types defined in your rules, it triggers the configured action, such as blocking the upload and alerting the administrator.

Microsoft Office Security Issues