FortiDLP
FortiDLP is a cloud-native endpoint DLP and Insider Risk Solution which is aimed at monitoring and Preventing Data Theft on the endpoint, across Windows, macOS and Linux.
khicks4
Staff
Staff
Article Id 365984
Description This article describes the pop-ups (popup) that can be seen when using the FortiDLP New Outlook plugin.
Scope FortiDLP.
Solution

When sending an email using the FortiDLP New Outlook add-in, FortiDLP will process the email and determine if the email should be blocked or not. In some scenarios, New Outlook or OWA will prompt pop-ups for Add-ins if they take long periods of time to complete before an email can be sent.  The following flowchart describes the process FortiDLP takes before sending or blocking an email and depicts at which point pop-ups can be viewed.

 

2025-01-06 10_13_55-New outlook Pop up flow - Google Slides.png

 

In the scenarios where pop-ups are presented due to processing time, these pop-ups are non-configurable and enforced by Microsoft (outside of the scope of the add-in itself). The following are the messages that are expected from New Outlook/OWA when sending an email when using the FortiDLP add-in.

  • When processing takes more than 5 seconds:


2024-12-20 15_19_15-agent-surgery (Channel) - Next - Slack.png

 

  • When processing completes, took more than 30 seconds, and the email is not blocked:


2024-12-20 15_21_21-agent-surgery (Channel) - Next - Slack.png

 

  • When processing completes and the email is blocked:
 

2024-12-20 16_04_07-mRemoteNG - HomeLab.xml - win-ep-4.png

 

There are some additional scenarios that may occur as a result of Microsoft issues. This issue page explains one such example. In this case, there is a scenario where a an event can be cancelled when another event is called and creates a pop-up for the user such as the following:

 

2024-12-20 15_22_04-agent-surgery (Channel) - Next - Slack.png


This is not directly caused by the FortiDLP Agent, but can depend on the events that have occurred and their timing.  Users can proceed by selecting the 'Don't Send' option and re-attempting to send the email.

 

Microsoft have issued the following statement regarding the existing issue:

 

"We are currently investigating the issue and have included a work item in our backlog to resolve it. We have actively prioritized launch event improvements for this semester (ending Mar 25) to address similar issues. We expect this to be resolved over the next few months, once we have clarity on the root cause and a path to resolution."

Contributors