Dear Valued Customer,
As a follow-up to our previous communication regarding the end-of-support of legacy DLP policy options (Data Identifiers, Regex, Keywords, etc.) from July 2025, we're excited to announce the ability for Skyhigh Security to automatically create classifications-based policies based on the functionality in your legacy DLP policies. This will streamline the process of transitioning your existing DLP policies to use modern data classifications. By automating this process, we aim to minimize disruption to your operations, minimize the need to manually migrate policies, and provide enhanced data security with data classifications.
Key Features:
-
Policy Cloning: The process that Skyhigh will run creates clones of your existing policies for testing and evaluation without changing any original policies.
- Eg.: Policy_A will be cloned as Policy_A(Migrated)
- Cloned Policy will be in disabled mode
- A new classification will be created with the name of the policy to include legacy CASB DLP keywords, regexes, dictionaries, proximity rules, filenames, file sizes and file paths. This classification will be referenced in the migrated policy
-
Customer Control: You will have full control over the migration process, including the ability to enable or disable migrated policies as needed.
- If you are in a lockdown phase or have a strict change control, it also provides you the added flexibility to determine when the migrated policies can be enabled.
Next Steps: The Skyhigh team will be automatically creating classification-based policies on your account on June 6, 2025. This change does not impact your current functioning.
Customer Action Needed:
- Please review the newly cloned policies, test them and let us know if you find any issues.
- There may be legacy policy constructs that the cloning process is unable to create automatically using classifications. Please review these policies and manually create classifications-based policies by following guidance here; else reach out to Skyhigh Support who will be able to provide guidance.
- Upon completion of review/testing of new policies, customers can activate the cloned data classifications-based policies, and disable or delete the old legacy DLP option-based policies.
Timeline for final migration of policy: We encourage all reviews of the cloned policies to be completed by June 30, 2025. From July 2025, existing legacy DLP policies will continue to work. However, Skyhigh will not address enhancement requests around the legacy DLP policy options (e.g. data identifiers) and new policies cannot be created using these legacy options. Any critical issues around the legacy DLP policy options will still be addressed until their end-of-life (TBD). Hence please prioritize the migration or testing of cloned policies.