Data Loss Prevention

 View Only
  • 1.  DLP 11.6 Network Monitor IP Filtering

    Posted Aug 14, 2013 09:47 AM

    Hi All, 

    I'm new to Symantec DLP solutions, but do have a question about IP filter in Network Monitor Configuration. 

    I want to exclude packet with destination IP addresses 10.*.*.* and 11.*.*.*; 

    Based on the syntex I learned from Symantec guide and this forum, I entered "-,10.x,x,x, *; -,11.x.x.x,*;+,*,*;". However, the system gave me validation errors. 

    I'm wondering is the Symantec 11.6 Network Monitor having the new syntex to validate the IP filtering?

    What can I do to make the syntex correct?

     

    Thanks, 

     

    Fiona



  • 2.  RE: DLP 11.6 Network Monitor IP Filtering

    Broadcom Employee
    Posted Aug 14, 2013 07:17 PM

    Hello Fiona,

    If you click on the help link in the top right hand side of the screen, the syntax is described in detail for filter.

    Based on the help page, I believe you want, "-,10.0.0.0/8,*;-,11.0.0.0/8,*;+,*,*"

    I hope this helps.

     

    Best,

    Ryan



  • 3.  RE: DLP 11.6 Network Monitor IP Filtering