DLP (data loss prevention) software requires your MFT to support the ICAP protocol in order to evaluate traffic that is encrypted (e.g. SFTP). If your MFT does not support ICAP, your DLP will be unable to evaluate encypted traffic, essentially bypassing it.