Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 15 subscribers
  • Views 531 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DLP - No success while testing

dirkkotte

Hi all,

i try to test DLP.

I have 5 Keywords defined for DLP-detection.

Every keyword counts "1"

DLP should trigger if count=2

i put 3 Words into a simple txt file and copy this file to USB stick and send this file via Outlook.--- nothing from DLP

I put all the words into an outlook-mail -- nothing from DLP

What i have to do to trigger DLP?  Is there a log for DLP at the client?

Thanks, Dirk



This thread was automatically locked due to age.
Parents
  • 0

    Hello Dirk,

    do I understand correctly that you haven't used DLP up to now?

    Is there a log
    if you are searching for a log that tells you why it does NOT trigger then - no. For the same reason that the AV scanner doesn't tell you why it deems a file to be clean.

    What i have to do to trigger DLP?
    if, as a first step, you want to confirm that DLP works at all I'd suggest a File Rule with Removable Storage as destination.  You can then proceed to other destinations,  content rules, custom rules, and more complex stuff.

    I put all the words into an outlook-mail
    please see what the data control scanner scans and its Known limitations. This might  help to create test cases.

    I have 5 Keywords defined for DLP-detection
    could you give the details? You've set up a policy with one (custom) content rule that in turn uses am advanced custom CCL with five expressions containing one of the keywords respectively, each a score of 1 and the trigger score is 2?

    Christian

Reply
  • 0

    Hello Dirk,

    do I understand correctly that you haven't used DLP up to now?

    Is there a log
    if you are searching for a log that tells you why it does NOT trigger then - no. For the same reason that the AV scanner doesn't tell you why it deems a file to be clean.

    What i have to do to trigger DLP?
    if, as a first step, you want to confirm that DLP works at all I'd suggest a File Rule with Removable Storage as destination.  You can then proceed to other destinations,  content rules, custom rules, and more complex stuff.

    I put all the words into an outlook-mail
    please see what the data control scanner scans and its Known limitations. This might  help to create test cases.

    I have 5 Keywords defined for DLP-detection
    could you give the details? You've set up a policy with one (custom) content rule that in turn uses am advanced custom CCL with five expressions containing one of the keywords respectively, each a score of 1 and the trigger score is 2?

    Christian

Children
No Data
Unfiltered HTML