A compliance team at a healthcare provider requires that any outbound email containing patient records (matching a HIPAA content dictionary) must still be delivered to external recipients but must be protected in transit and at rest on the recipient side. The security engineer creates an outgoing mail policy on the Cisco Secure Email Gateway with a DLP policy that matches the HIPAA classifier. Which primary action should be assigned to the DLP policy to satisfy this requirement?