RoadmapMicrosoft PurviewRolling outGeneral AvailabilityPreviewWorldwide (Standard Multi-Tenant)GCCGCC HighDoD
Microsoft Purview: Endpoint Data Loss Prevention - Protect sensitive data over FTP and SFTP with Endpoint DLP
RM565868 · published Jun 15, 2026 · updated Oct 5, 2026 · 3 replies
Endpoint DLP support for FTP and SFTP enables organizations to monitor and protect sensitive data transferred from managed endpoints using FTP and SFTP, helping prevent unauthorized data exfiltration while maintaining visibility and control.
Discussion
Sign in to like, dislike or reply.
can you share technical details about this feature? is it going to be process based monitoring file access by FTP,SFTP Clients ? or do we perofrm network monitoring
I beleve there is more information including screnshots of how to configure it in https://mc.merill.net/message/MC1404319
Not sure if MS shared the underpinnings of how this works exactly, but if it looks like any of the other capabilities, my educated guess would be that it looks at network traffic specifically. Under the hood, the MDE-engine is used. If it works similar to blocking activities over SMB/RDP, it would probably look at the network (protocol) layer, rather than just a process name. Would also make a lot more sense to do it that way.