Data Loss Prevention

Hi,

How to protect sensitive information in image file/jpeg files sent to external domain or copied to removable media using Syamntec DLP.

One can only Prohibit transfer of image files using a DLP Solution. There cannot be a content aware approach for images. Its either 'all or none' type of a policy that I would build in such cases.

The best use case I have seen for this case is that:

• Create a DLP Policy to Block all Image Transfers to removable devices
• Add user exceptions to the policy (for example: desktopsupport or securityadmin or incidentreviewer to the policy who can make this transfer happen after reviewing)
• In some organized environments, end-users also log a Incident/Ticket/Case for Forbidden/Image FIle transfers & then one of these 'users in exception' review the data and make the transfer happen.

Hi Santosh,

I am not agree with Leadvue's response.

As currently Syamntec DLP does not have OCR functionlity to detect sensetive information from images/jpeg etc. I guess they are working on it. As per Leadvue you can not block all Images to removable media and so on. there are few alternate option which can help you to achive above requirement.

I would suggest, identfy the jpeg (scan) files or image files that are being availble in you network/machine theough discover and other method,try to search through file name,folder etc smart serch methods and use IDM techlogy to create profile and detect the sensetive information transferred through image files.