Data Loss Prevention

Does scanning for card holder data by itself identify numbers contained within image file ? using defaut PCI policy within VONTU.

My understanding is that you have to create IDM of the image file contained card holder data and only then it can be protected.

Can anyone clarify ? are there any version considerations ?

Rgds.

Symantec DLP cannot analyze image files as it doesnt have OCR integration.

While creating an IDM profile will identify the exact file, this is not reliable because:

a) An Image file cannot be Fuzzy hashed unlike many other document sources. It will be hashed with the entire file hash value.

b) Any minor changes in the image file, like maybe even a 'Save As' from some apps may change the hash value.

There is an addon from Help AG (helpag.com) that they say can do OCR with Vontu.  i have never seen or used it, but did contact them in the past to investigate it.

hello

 IDM for image is not very useful. But if scan you are talking about comes from a specific software you can get other characteristics of your image like file type, size and may be a custom file type signature.

 It seems to me that symantec is testing a module to include OCR in DLP so may you can contact your representative to have more information.

 regards.