Jump to content


Photo

DLP filter exemptions/greater configurability - ZIP+4

dlp filter predefined data leakage prevention ZIP ZIP+4 false positive

  • Please log in to reply
1 reply to this topic

#1 Jaybone

Jaybone
  • Members
  • 120 posts

Posted 27 August 2014 - 11:35 AM

We get false positives for SSNs fairly often, causing out filter to encrypt messages that shouldn't be encrypted.   I finally nailed down one (and possibly our primary) cause today when I copy/pasted the OCR'd text of a PDF file into notepad.

The copier's OCR software had added an extra space to the document footer's ZIP+4.

 

"06107-nnnn" becomes "061 07-nnnn"

 

Going back and reconciling past encrypted messages with the source PDFs that were attached to them, this case explains a LOT of our false positives.  This is multiple models of Xerox copiers that are doing this, and our vendor has told us that there is no way to adjust the OCR settings to accommodate for this.

 

 

 

I'm requesting an option to exempt certain strings from the predefined Data Leakage Prevention filters.  

E.g. I would like to be able to exempt 061-07-nnnn, with any and all characters used for separators, from the SSN filter.



#2 Siam Luu

Siam Luu
  • Members
  • 10 posts

Posted 22 December 2015 - 04:12 PM

+1 for this feature request.

 

My desire is to be able to set conditional statements for the built-in DLP rules.  For example

Ignore SSN filter if it is preceded by a string like "Customer #" or something like that.