During the configuration of a DLP Detection Rule, we can choose to include or exclude a URL Domain, such as mail.compan.com or company.com.
Here is the screenshot of this option:
What I wondered is that we can only support the Domain filter, but, cannot support a Sub-Domain filter.
For example, there are two sub-domain of the company.com, one is company.com/upload, the other one is company.com/file
The company.com/upload is used to upload files, and the company.com/file is used to browser files.
What we want to do is monitor the traffic of the company.com/upload and ignore the traffic of the company.com/file.
The support of the sub-domain is a great help to such kind of scenario.