In some cases, you might have use cases where you need to exclude certain URLs and apps from forwarding non-file based traffic to Enterprise Data Loss Prevention (E-DLP). For example, you might not require Enterprise DLP inspection in the following scenarios:

You can use an existing Security policy rules to easily exclude these Sanctioned URLs and apps from Enterprise DLP rather than create a new Security policy rule each time you want to exclude specific URLs and apps. This allows you to continue to enforce your data loss prevention requirements for URLs and apps that require it while excluding the URLs and apps that don't. This eases the operational overheard of managing your policy rulebase by reducing the total number of policy rules you need to manage