XML DataLookup command for incoming domains

Document ID : KB000124251
Last Modified Date : 09/01/2019
Show Technical Document Details
Introduction:

XML Attribute lookups can be used to detect metadata attributes of events. This metadata is stored in XML format. This allows policy triggers to access event information that is not accessible through any other trigger. Syntax summaries and brief examples are given below.

What Is XML Metadata?

XML metadata contains ancillary information about the item itself (for example, when a file was created or an x-header inserted into an Internet Mail).

This XML metadata is not the same as the event metadata stored by CA Data Protection on the CMS. This event metadata contains details about about the CA Data Protection event (for example, the event capture date, participants, and trigger details).

For more information please refer to the xmlattr section in the CA Data Protection Product documentation

Question:
Is it possible to use xmlattr lookups to detect Incoming emails from certain domains?  for example: gmail.com, yahoo.com, outlook.com, hotmail.com, etc.
Environment:
CA Data Protection 15.x
Answer:
It is not possible to use xmlattr lookups to interrogate the domain, this can only be achieve through policy by adding domains to "Include Address List".  CA Data Protection only attempts to classify outgoing e-mails and attachments sent to listed addresses on an Outgoing trigger. Incoming mails, will only work for Outlook\Notes clients (Incoming policies also have "Include Address List", where they can mention the sender's mail addresses to be included).
Additional Information:
Orchestria, Orchestria EPM, Orchestria APM, CA DLP and CA DataMinder are all brand names for the product now known as CA Data Protection.

CA is a Broadcom company.