Files with Microsoft AIP labels not detected by DLP

• Custom data pattern is configured with the following file property types as per our documentation: 
  • Sensitivity -> Confidential
  • MSIP_Label_<GUID>_Enabled -> Confidential
• File is set with the Confidential label but DLP is not detecting the file and not triggering an incident. 

• Prisma Access
• PanOS

• The file properties identified appears to be different compared to is documentated.
• File property called "ClassificationContentMarkingFooterText" contains the value "Confidential" or "Non-Confidential" .

In the custom data pattern, configure the file property type field dropdown to "AIP Tags" and value to "ClassificationContentMarkingFooterText=Confidential" or "ClassificationContentMarkingFooterText=Non-Confidential" based on the requirement. 

Secure AIP Labeled Files with Enterprise DLP