I think the important thing were the settings for the rule.
I checked the Advanced Config Search, Must Contain, Find String. Then I searched the Entire config file.
I was able to find this banner (yes I know there are some grammatical mistakes):
Only users authorized by MYCOMPANY may utilize
or access this electronic system or database for approved purposes.
Any unauthorized use, inappropriate use, or disclosure of this system
or any information contained therein is prohibited and may result in
revocation of access, disciplinary action (up to and including
termination) and/or legal action. MYCOMPANY retains the right to monitor,
record, distribute, or review any user's electronic activity, files,
data, or messages. Any evidence of illegal or actionable activity may
be disclosed to law enforcement officials or used by MYCOMPANY in any legal
action against the offending user. Reminder: Non-public information
found in or created on this system is the proprietary, confidential
and/or trade secret information of MYCOMPANY or others entrusting their
information to MYCOMPANY. In addition, information transmitted to a foreign
person through the use of this system may be subject to U.S. Export
Control laws. If appropriate, contact your Export Coordinator or the
law Department for assistance.