Data Loss Prevention

 View Only
Back to discussions
Expand all | Collapse all

custom plugin not always with same parameter values

  • 1.  custom plugin not always with same parameter values

    Trusted Advisor
    Posted Aug 07, 2013 08:19 AM

    Hello

     I have an issue with DLP custom plugin because DLP behaviour is not the same depending of DLP incident.
     When we have a DLP incident generated by an email message which contains an archive file as an attchment (zip for example), there
     is two cases :
     - If our DLP policy does not look at attachment, custom plugin API call our script with only information on archive file (for example
     attachment-Name1=test.zip and attachment-Size1=345)
     - If our DLP policy match on attachment content, custom plugin API call our script with all content of archive file. Which usually means
     a lot of attributes (which usually cause issue posted in other forum thread)
     
      Does anyone already face this issue and found a solution ro a workaround ?
     
      Regards