Symantec Data Loss Prevention (DLP)
Endpoint Prevent
Using a Block SMTP e-mail response rule on the endpoint does generate an incident.
But it does not block the e-mail.
Reported on 15.1 MP2.
Can affect any version.
The response rule was incorrect.
The customer used a Network Block rule.
Changed the rule to an Endpoint Block.
The e-mails are now blocked.